ZyXEL Communications NWA-3160 Series manual

www .zyxel.com NW A-3160 Series IEEE 802.1 1a/b/g Business WLAN Access Point IEEE 802.1 1b/g Business WLAN Access Point User ’ s Guide V ersion 3.60 7/2007 Edition 1 DEFAULT LOGIN IP Address http://1 92 .168.1.2 Password 1234[...]

[...]

About This User's Guide ZyXEL NWA-3160 Series User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y ou should have at leas t a basic knowledge of TCP/IP networking concepts and topology . Related Document ation • Quick Start Gui[...]

Document Conventions ZyXEL NWA-3160 Series User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other import ant information (for example, other things yo u may need to configure or he[...]

Document Conventions ZyXEL NWA-3160 Series User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall T ele phone Switch Router[...]

Safety Warnings ZyXEL NWA-3160 Series User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warning notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on[...]

Safety Warnings ZyXEL NWA-3160 Series User’s Guide 7[...]

Safety Warnings ZyXEL NWA-3160 Series User’s Guide 8[...]

Contents Overview ZyXEL NWA-3160 Series User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 31 Introducing the ZyXEL Device ............... ................ ................ ................ ................. ................ .[...]

Contents Overview ZyXEL NWA-3160 Series User’s Guide 10[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 11 Table of Contents About This User's Guide ................................ ........................................................................ .. 3 Document Conventions.................................................................. ......................................... .4 Sa[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 12 3.1 The S tatus Screen ..................... ................ ............. ................ ................ ................ ....... ...... 45 Chapter 4 T utorial ........................................................................ ............................................... ......[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 13 5.3.1 Configuring Password ......... ................ ................ ................ ................ ................ ....... 78 5.4 Configuring Time Setting ................ ................ ................ ................ ................. ................ ... 80 5.5 Pre-defined NTP [...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 14 7.4 Introduction to WP A ............... ................ ................. ................ ................ ................ ....... .... 100 7.4.1 User Authentication ..................... ................. ................ ................ ............. .............. 101 7.4.2 Encryptio[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 15 Chapter 10 IP Screen.......................................................... ............................................................ .......... 133 10.1 Factory Ethernet Defaults ........... ............. ... ............. ................ ................ ................ ........ 13[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 16 14.2 Self-signed Certificates ..... ................... .......... ................ ................ ................. ............ .. ... 158 14.3 V erifying a Certificat e ........ ................ ................ ............. ................ ................. ............ ..... 158 14.[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 17 17.3 Association List . ................ ................ ................ ................. ................ ................ ....... ....... 200 17.4 Channel Usage ........... ................ ................ ................ ................ ............. ................ .... .... 201 1[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 18 Chapter 23 System Information and Diagnosis .......................................................... ........................... 223 23.1 System S tatus ...... ................ ................ ................. ................ ................ ................ ..... ...... 223 23.2 Syste[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 19 26.2 ZyXEL Device Acc ess and Login .................. .................... ................ ................ .............. 244 26.3 Internet Access ....... ................. ................ ................ ................ ................ ................ .. ...... 246 26.4 Wireless Rou[...]

Table of Contents ZyXEL NWA-3160 Series User’s Guide 20[...]

List of Figures ZyXEL NWA-3160 Series User’s Guide 21 List of Figures Figure 1 Access Point Application ...... ............. ... ................ ................ ............. ................ .......... ............. 34 Figure 2 Bridge Application ................................ ................ ................ ................ ..............[...]

List of Figure s ZyXEL NWA-3160 Series User’s Guide 22 Figure 39 T utorial: MAC Filter Edit (SERVER_1) .. ................ ................. ............ ................. ................ ... 72 Figure 40 T utorial: SSID Profiles Activated ........ ................ ............. ................ ................ .............. ......... 73 Figur[...]

List of Figures ZyXEL NWA-3160 Series User’s Guide 23 Figure 82 ROGUE AP > Configuration ............ ................ ................ ................ ................ ................ .... . 138 Figure 83 ROGUE AP > Friendly AP ........ ................ ................. ................ ................... ................ .. ...... 139[...]

List of Figure s ZyXEL NWA-3160 Series User’s Guide 24 Figure 125 VLAN Attribute Setting for Tunnel-T ype .... ................ ................ ................ ............. ........... 195 Figure 126 Completed Advanced T ab .......... ......... ... ................. ................ ................ ............. ......... ..... 195 Figure 127[...]

List of Figures ZyXEL NWA-3160 Series User’s Guide 25 Figure 168 W all-mounting Example ....... ................... ................. ................ ................ ................... ........ 254 Figure 169 Masonry Plug and M4 T ap Screw ........ ... ................. ................ ................ ............. ............. .2 5 4 Figur[...]

List of Figure s ZyXEL NWA-3160 Series User’s Guide 26[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 27 List of Tables T able 1 Models Cov ered .......................... ................ ................. ................ ................ ............ .............. ... 33 T able 2 LEDs ........ ................ ................ ................ ............. ................ ................ ..[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 28 T able 39 WIRELESS > Layer-2 Isolation Configuratio n . ................ ............. ................ ................ ........ 126 T able 40 WIR ELESS > MAC Filter .......... ................ ................. ................ ................ ................ .... ....... 129 T able 4[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 29 T able 82 Menu 1 General Setup ........................ ................ ................ ................ ................. ....... .......... 215 T able 83 Menu 3.2 TCP/IP Setup ... ................ ................ ................ ................ ................ ............ ......... 218[...]

List of Tables ZyXEL NWA-3160 Series User’s Guide 30[...]

31 P ART I Introduction Introducing the ZyXEL Device (33) Introducing the W eb Configurator (41) S tatus Screens (45) T utorial (49)[...]

32[...]

ZyXEL NWA-3160 Series User’s Guide 33 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways yo u can manage the ZyXEL Device. 1.1 Introducing the ZyXEL Device Y our ZyXEL Device extends the range of your existing wired networ k wi thout additional wiring[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 34 " A different channel should be configured for each WLAN interface to reduce the effect s of radio interference. 1.2.1 Access Point The ZyXEL Device is an ideal access solution fo r wireless Internet connection. A typical Internet access application for your ZyXEL D[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 35 Figure 2 Bridge Application Figure 3 Repeater Application 1.2.3 AP + Bridge In AP+Bridge mode, the ZyXEL Device supports both AP and bridge connectio n at the same time.[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 36 In the figure below , A and B use X as an AP to access the wired network, while X and Y communicate in bridge mode. When the ZyXEL Device is in AP + Bridge mode, security between APs (the W ireless Distribution System or WDS) is independent of the security between the wi[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 37 For example, you might want to set up a wire less network in your office where Internet telephony (V oice over IP , or V oIP) users have priority . Y ou also want a regular wireless network for standard users, as well as a ‘guest ’ wireless network for vis itors. In [...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 38 1.3 W ays to Manage the ZyXEL Device Use any of the following method s to manage the ZyXEL Device. • W eb Configurator . This is recommended fo r everyday management of the ZyXEL Device using a (s upported) we b browser . • Command Line Interface. Line commands are m[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 39 1.6 LEDs Figure 6 LEDs T able 2 LEDs LABEL COLOR STATUS DESCRIPTION WDS Green On The ZyXEL Device is in AP+Bridge or Bridge/Repea ter mode, and has successfully established a Wireless Distribution System (WDS) connection. Off Either • The ZyXEL Device is in Access Poin[...]

Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 40 ETHERNET Green On The ZyXEL Device has a 10 Mbps Eth ernet connection. Blinking The ZyXEL Device has a 10 Mbps Eth ernet connection and is sending or re ceiving data. Y ellow O n The ZyXEL Device has a 100 Mbps Ethernet connection. Blinking The ZyXEL Device has a 100 Mbp[...]

ZyXEL NWA-3160 Series User’s Guide 41 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access the ZyXEL Device’ s web configura tor and provides an overview of its screens. 2.1 Accessing the W eb Configurator 1 Make sure your hardware is properly connected a nd prepare your com puter or computer network to connect to th[...]

Chapter 2 Introducing the Web Configur ator ZyXEL NWA-3160 Series User’s Guide 42 Figure 7 Change Password Screen 6 Click Apply in the Replace Certificate screen to create a certificate using your ZyXEL Device’ s MAC address that will be specific to this device. Figure 8 Replace Certificate Screen Y ou should now see the St a t u s screen. Se e[...]

Chapter 2 Introducing the Web Configurator ZyXEL NWA-3160 Series User’s Guide 43 2.2.1 Methods of Restoring Factory-Default s Y ou can erase the current configuration and restore factory defaults in three ways: Use the RESET button to upload the default configuratio n file. Hold this button in for about 10 seconds (the lights will begin to blink)[...]

Chapter 2 Introducing the Web Configur ator ZyXEL NWA-3160 Series User’s Guide 44 Click MAINTENANCE to view information about your ZyXEL Device or upgrade configuration and firmware file s. Maintenance features include St a t u s (Statistics), Association List , Channel Usage , F/W (firmware) Upload , Configuration (Backup, Restore and Default) a[...]

ZyXEL NWA-3160 Series User’s Guide 45 C HAPTER 3 Status Screens The St a t u s screen di splays when you log in to the ZyXEL Device, or click ST A TUS in the navigation menu. Use the St a t u s screens to look at the current status of the device, sys tem resources, interfaces and SSID status. The St a t u s screen also provides detaile d informat[...]

Chapter 3 Sta tus Screens ZyXEL NWA-3160 Series User’s Guide 46 Model This field displ ays the ZyXEL Device’s exact model name. Firmware V ersion This field displays the curren t ve rsion of the firmware inside the device. It also shows the date the firmware ve rsion was created. Y ou can chang e the firmware version by uploading new firmware i[...]

Chapter 3 Status Screens ZyXEL NWA-3160 Series User’s Guide 47 VLAN This field displays the VLAN ID of each SSID in use, or Disabled if the SSID does not use VLAN. System S tatus Show St atistics Click this link to view port status and packet specific statistics. See Section 17.2.1 on page 200 . Association List Click this to see a list of wirel [...]

Chapter 3 Sta tus Screens ZyXEL NWA-3160 Series User’s Guide 48[...]

ZyXEL NWA-3160 Series User’s Guide 49 C HAPTER 4 Tutorial This chapter first provides an overview of ho w to configure the wireless LAN on your ZyXEL Device, and then gives step-by- step guidelines showing how to configure your ZyXEL Device for some example scenarios. 4.1 How to Configure the Wireless LAN This section shows how to choose which wi[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 50 Figure 1 1 Configuring Wireless LAN S elect Operating Mode . Access Point Bridge / Repeater Mo de. AP + Bridge Mode. MBSSID Mode. Select 802.1 1 Mode and Channel ID . Select SSID Configure SSID P rofile. Edit Security Pr ofile . Configure RADIUS authentication (optional). Configure internal[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 51 4.1.3 Further Reading Use these links to find more information on the steps: • Choosing 802.1 1 Mode : see Section 6.7. 1 on page 91 . • Choosing a wireless Channel ID : see Section 6.7. 1 on page 91 . • Selecting and configuring SSID pr ofile (s): see Section 6.7.1 on page 91 and Sec[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 52 Figure 12 T utorial: Example MBSSID Set up The standard network ( SSID04 ) has ac cess to all resources. The V oIP network ( V oIP_SSID ) has access to a ll resources and a high Quality of Service (QoS) setting (see Chapter 6 on page 83 for information on QoS). The guest network ( Guest_SSI[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 53 Figure 13 T utorial: Wireless LAN: Before Select MBSSID from the Operating Mode drop-down list box. The screen displays as follows. Figure 14 T utorial: Wireless LAN: Change Mode This Select SSID Pr ofile table allows you to activate or deactivate SSID profiles. Y our wireless network was p[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 54 Select the Index box for the en try and click Apply to activate the profile. Y our standard wireless network ( SSID04 ) is now accessible to your wireless clients as before. Y ou do not need to configure anything el se for your standard n etwork. 4.2.2 Configure the V oIP Network Next, clic[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 55 Figure 16 T utorial: V oIP SSID Profile Edit • Choose a new SSID for the V oIP network. In this example, enter V OIP_SSID_Example . Note that although the SSID chan ges, the SSID profile name ( V oIP_SSID ) remains the same as before. • Select Enable from the Hide Name (SSID) list box. [...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 56 Figure 17 T utorial: V oIP Sec urity Y ou already chose to use the security02 profile for this network, so select the radio button for security02 and click Edit . The following screen appears. Figure 18 T utorial: V oIP Security Profile Edit •C h a n g e t h e Name field to “V oIP_Secur[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 57 • Click Apply . The WIRELESS > Security screen displays. Ensure that the Prof ile Name for entry 2 displays “ Vo I P _ S e c u r i t y ” and that the Security Mode is WP A2-PSK . Figure 19 T utorial: V oIP Sec urity: Updated 4.2.2.2 Activate the V oIP Profile Y ou need to activate [...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 58 Figure 21 T utorial: Guest Edit • Choose a new SSID for the guest network. In this example, enter Guest_SSID_Example . Note that although the SSID chan ges, the SSID profile name ( Guest_SSID ) remains the same as before. • Select Disable from the Hide Nam e (SSID) list box. This makes [...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 59 • Select WP A-PSK in the Security Mode field. WP A-PSK provides strong security that is supported by most wireless clients . Even though your Guest_S SID clients do not have access to sensitive information on the network, you should not leave the network without security . An attacker cou[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 60 Figure 25 T utorial: Layer 2 Isolation Profile Enter the MAC addresses of the two network devi ces you want users on the guest network to be able to access: the main network router (00:AA:00:AA:00:AA) and the network printer (AA:00:AA:00:AA:00). Cl ick Apply . 4.2.3.3 Activate the Guest Pro[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 61 • T ry to access each network using the corre ct security settings, and then using incorrect security settings, such as the WP A-PSK for an other active network. If the behavior is dif ferent from expected (for example, if you can access the V oIP wireless netwo rk using the security sett[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 62 Figure 27 T utorial: Wireless Netw ork Example In the figure, the solid circle represents the range of your wireless network, and the dashed circle represents the extent of the coffee shop’ s wireless networ k. Note that the two networks overlap. This means that one or more of your APs ca[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 63 " The ZyXEL Device can detect the MAC addresse s of APs automatically . However , it is more secure to obt ain the correct MAC addresses from another source and add them to the friendly AP list manually . For example, an attacker’s AP mimicking the correct SSID could be placed on the[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 64 " Y ou can add APs that are not p art of your network to the friendly AP list, as long as you know that they do not pose a threat to your network’ s security . The Friendly AP screen now appears as follows. Figure 29 T utorial: Friendly AP (After Data Entry) 3 Next, you will save the[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 65 Figure 31 T utorial: Warning 5 Save the friendly AP list somewhere it can be accessed by all the other access points on the network. In this example, save it on the network file server ( E in Figure 27 on page 62 ). The default filename is “Flist”. Figure 32 T utorial: Save Friendly AP [...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 66 2 In the Period (min.) field, enter how often yo u want the ZyXEL Device to scan for rogue APs. Y ou can have the ZyXEL Device sca n anywhere from once every ten minutes to once every hour . In this example, enter “10”. 3 Click Apply . 4.3.3 Set Up E-mail Logs In this section, you will [...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 67 •I n t h e Send Immediate Alert section, select the events you want to trigger immediate e- mails. Ensure that Rogue AP is selected. • Click Apply . 4.3.4 Configure Y our Other Access Points Access point A is now configured to do the following. • Scan for access points in its coverage[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 68 4.4 Using Multiple MAC Filters and L-2 Isolation Profiles This example shows you how to allow certain users to access only specific parts of your network. Y ou can do this by using multiple MAC filters and layer-2 isolation profiles. 4.4.1 Scenario In this example, you run a company network[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 69 Each SSID profile already uses a different pre-shared key . In this example, you will configure access limitations for each SSID pr ofile. T o do this, you will take the following steps. 1 Configure the SER VER_1 network’ s SSID profile to use speci fic MAC filter and layer-2 isolation pr[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 70 Figure 36 T utorial: SSID Profile 2 Select SER VER_1 ’ s entry and click Edit . The following screen displays. Figure 37 T utorial: SSID Edit Select l2Isolation03 in the L2 Isolatio n field, a nd select macf ilter03 in the MAC Filtering field. Click Apply . 3 Click the Layer -2 Isolation [...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 71 Figure 38 T utorial: Layer-2 Isolation Edit Enter the network router ’ s MAC Address and add a Description (“NET_ROUTER” in this case) in Set 1 ’s e n t r y. Enter server 1’ s MAC Address and add a Description (“SER VER_1” in this case) in Set 2 ’s e n t r y . Change the Pro[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 72 4.4.5 Configure the SER V ER_2 Network Next, you will configure the SER VER_2 network that allows Bob to access secure server 2 and the Internet. T o do this, repeat the procedure in Section 4.4.4 on page 69 , substituting the following information. 4.4.6 Checking your Settings and T esting[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 73 Figure 40 T utorial: SSID Profiles Activated 2 Next, click the SSID tab. Check that each configured SSID profile uses the correct Security , Layer -2 Is olation and MAC Filter profiles, as shown in the following figure. Figure 41 T utorial: SSID T ab Correct Settings V If the settings are n[...]

Chapter 4 Tutorial ZyXEL NWA-3160 Series User’s Guide 74 • Using another computer and wireless clie nt, but with the correct security settings, attempt to associate with the SER VER_1 ne twork. Y ou should be unab le to do so. If you can do so, MAC filte ring is misconfigured. 2 T est the SER VER_2 network. • Using Bob’ s computer and wirel[...]

75 P ART II The W eb Configurator System Screens (77) W ireless Config uration (83) W ireless Security Configuration (99) MBSSID and SSID (1 15) Other W ireless Configuration (123) IP Screen (133) Rogue AP (135) Remote Management Screens (141) Internal RADIUS Server (151) Certificates (157) Log Screens (175) VLAN (181) Maintenance (199)[...]

76[...]

ZyXEL NWA-3160 Series User’s Guide 77 C HAPTER 5 System Screens 5.1 System Overview This section provides information on general system setup. 5.2 Configuring General Setup Click SYSTEM > General . Figure 42 System > General The following table describes the labels in this screen. Ta b l e 11 System > Gener al LABEL DESCRIPTION General S[...]

Chapter 5 System Screens ZyXEL NWA-3160 Series User’s Guide 78 5.3 Administrator Authentication on RADIUS The administrator authentication on RADIUS fe ature lets a (external or internal) RADIUS server authenticate management logins t o the Zy XEL Device. This is u s eful if you need to regularly change a password that you u se to manage several [...]

Chapter 5 S ystem Screen s ZyXEL NWA-3160 Series User’s Guide 79 Figure 43 SYSTEM > Password. The following table describes the labels in this screen. T able 12 Password LABEL DESCRIPTIONS Enable Admin at Local Select this check box to have the de vice authenticate ma nagement l ogins to the device. Use old setting Select this to have the ZyXE[...]

Chapter 5 System Screens ZyXEL NWA-3160 Series User’s Guide 80 5.4 Configuring T ime Setting T o change your ZyX EL Device’ s time and date, click SYSTEM > T ime Setting . The screen appears as shown. Use this screen to configur e the ZyXEL Device’ s time based on yo ur local time zone. Figure 44 SYSTEM > T ime Setting RADIUS Select the[...]

Chapter 5 S ystem Screen s ZyXEL NWA-3160 Series User’s Guide 81 The following table describes the labels in this screen. T able 13 SYSTEM > Time Setting LABEL DESCRIPTION Current T ime This field displays the time of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time with the time server (if configur ed)[...]

Chapter 5 System Screens ZyXEL NWA-3160 Series User’s Guide 82 5.5 Pre-defined NTP T ime Servers List When you turn on the ZyXEL De vice for the first time, the date and time start at 2000-01-01 00:00:00. When you select Auto in the SYSTEM > Time Setting screen, the ZyXEL Device then attempts to synchronize w ith one of the following pre-defin[...]

ZyXEL NWA-3160 Series User’s Guide 83 C HAPTER 6 Wireless Configuration This chapter discusses how to configure the W ireless scre ens on the ZyXEL Device. 6.1 Wireless LAN Overview This section introduces the wireless LAN (WLAN) and some basic scenarios. 6.1.1 BSS A Basic Service Set (BSS) exists when all co mmunications between wireless station[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 84 6.1.2 ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distributio n System (DS). An ESSID (ESS IDentificati[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 85 6.3 Quality of Service This section discusses the Quality of Service (QoS) fe atures available on the ZyXEL Device. 6.3.1 WMM QoS WMM (W i-Fi MultiMedia) QoS (Qua lity of Service) ensures quality of ser vice in wireless networks. It controls WLAN transmission priority on packe[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 86 A TC assigns priority based on packet size, since time-sensitive applications such as Internet telephony (V oice over IP or V oIP) tend to have smaller pa cket sizes than non-time sensitive applications such as FTP (File T ransfer Protoc ol). The following tabl e shows some co[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 87 The following table shows how priorities are ass igned for packets coming from the LAN to the WLAN. 6.3.3.2 A TC+WMM from WLAN to LAN A TC+WMM from WLAN to LAN automatically pr ioritizes (assigns an A TC value to) all packets coming from the WLAN. Packets are a ssigned an A TC[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 88 DSCP is backward compatible with the three precedence bits in the T oS octet so that non- DiffServ compliant , T oS-enabled network device will not conflict with the DSCP mapping. The DSCP value determines the forwardi ng behavior , the PHB (Per-Hop Behavior), that each packet[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 89 6.4.2 STP T erminolo gy The root bridge is the base of the spannin g tree; it is the bridge with the l owest identifier value (MAC address). Path cost is the cost of tr ansmitting a frame onto a LAN thro ugh that port. It is assigned according to the speed of the link to which[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 90 6.4.4 STP Port St ates STP assigns five port states (see next table) to eliminate packet looping. A bridge port is not allowed to go directly fro m blocking state to forwarding state so as to eliminate transient loops. 6.5 DFS When you ch oose 802.1 1a in Access Point mode (NW[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 91 6.7 Configuring Wireless Settings Click WIRELESS > Wir eless . The screen varies depending upon the op erating mode you select. 6.7.1 Access Point Mode Select Access Point as the Operating Mode to display the screen as shown next. Figure 48 Wireless: Access Point The follow[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 92 6.7.2 Bridge/Repeater Mode The ZyXEL Device can act as a wireless network bridge and establish wireless links with other APs. Y ou need to know the MAC address of the peer device, which also must be in bridge mode. The ZyXEL Device can establish up to five wireless links with [...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 93 Figure 49 Bridging Example Be careful to avoid bridg e loops when you enable bridging in th e ZyXEL Device. Bridge loops cause broadcast traffic to circ le the network endlessly , resulting in possible throughput degradation and disru ption of communications. Th e following ex[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 94 Figure 51 Bridge Loop: Bridge Connected to Wired LAN T o prevent bridge loops, ensu re that you enable STP in the Wi re l e ss screen or your ZyXEL Device is not set to bridge mode while co nnec ted to both wired and wireless segments of the same LAN. T o have the ZyXEL Device[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 95 The following table describes the bridge labels in this screen. T able 24 Wireless: Bridge/Repeater LABEL DESCRIPTIONS Operating Mode Select Bridge/Repeater in this field. 802.1 1 mode Select 802.1 1b Only to allow only IEEE 802.1 1b compliant WLAN devices to associate with th[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 96 See T able 23 on page 91 for information on the ot her labels in this screen. 6.7.3 AP+Bridge Mode Select AP+Bridge as the Operating Mo de in the WIRELESS > Wir eless screen to have the ZyXEL Device function as a bridge and access point simultaneously . See the section on a[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 97 Figure 53 Wireless: AP+Bridge See the tables describing the fields in the Access Point and Bridge/Repeater operating modes for descriptions of the fields in this screen. 6.7.4 MBSSID Mode Select MBSSID as the Operating Mode to display the screen. Refer to Chapter 8 on page 1 1[...]

Chapter 6 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 98[...]

ZyXEL NWA-3160 Series User’s Guide 99 C HAPTER 7 Wireless Security Configuration This chapter describes how to use the Security and RADIUS screens to configure wireless security on your ZyXEL Device. 7.1 Wireless Security Overview W ireless security is vital to your network to pr otect wireless communicat ion between wirele ss stations, access po[...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 100 Y our ZyXEL Device allows you to configure up to four 64-bit, 128-bit or 152-bit WEP keys but only one key can be enabled at any one time. 7.2 802.1x Overview The IEEE 802.1x standard outlines enhanced security methods for both the authentication of wireless station[...]

Chapter 7 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 101 7.4.1 User Authentication WP A applies IEEE 802.1x and Extensible Auth entication Protocol (EAP) to authenticate wireless clients using a RADIUS database. See later in this chapter and the appendices for more information on IEEE 80 2.1x, RADIUS, EAP and PEAP . If yo[...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 102 3 The AP derives and distrib utes key informatio n to the wireless clients. The key itself is not sent over the network, but i s derived from the PSK an d information exchanged between the AP and the client. 4 The AP and wireless clients use the TKIP or AES encrypti[...]

Chapter 7 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 103 Figure 56 WP A(2) with RAD IUS Application Example 7.6 Security Modes The following table describes the security modes you can configure. T able 25 Security Modes SECURITY MODE DESCRIPTION None Select this to have no data encryption. WEP Select this to use WEP encry[...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 104 7.7 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk[...]

Chapter 7 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 105 Figure 57 Wireless > Security The following table describes the labels in this screen. The next screen varies according to the Security Mode you select. 7.9.1 Security: WEP Select WEP in the Security Mode field to display the following screen. T able 27 WIRELESS [...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 106 Figure 58 WIRELESS > Security: WEP The following table describes the labels in this screen. 7.9.2 Security: 802.1x Only Select 802.1x-Only in the Security Mode field to display the following screen. T able 28 Security: WEP LABEL DESCRIPTION Name T ype a name to i[...]

Chapter 7 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 107 Figure 59 Security: 802.1x Only The following table describes the labels in this screen. 7.9.3 Security: 802.1x S tatic 64-bit, 802.1x S t atic 128-bit Select 802.1x S tatic 64 or 802.1x S tatic 128 in the Security Mode field to display the following screen. T able [...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 108 Figure 60 Security: 802.1x Static 64-bit, 802.1x Static 128-bit The following table describes the labels in this screen. T able 30 Security: 802.1x Static 64-b it, 802.1x Sta t ic 128-bit LABEL DESCRIPTION Name T ype a name to i dentify this security profile. Securi[...]

Chapter 7 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 109 7.9.4 Security: WP A Select WP A in t he Security Mode field to display the followi ng screen. Figure 61 Security: WP A The following table describes the labels in this screen. 7.9.5 Security: WP A2 or WP A2-MIX Select WP A2 or WP A2-M IX in the Security Mode field [...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 11 0 Figure 62 Security:WP A2 or WP A2-MIX The following table describes the labels not previously discussed T able 32 Security: WPA2 or WPA2-MIX LABEL DESCRIPTIONS Name T ype a name to identify this security profile. Security Mode Choose WP A2 or WP A2-MIX in this fiel[...]

Chapter 7 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 111 7.9.6 Security: WP A-PSK, WP A2-PSK, WP A2-PSK-MIX Select WP A-PSK , WP A2-PSK or WP A2-PSK-MIX in the Security Mode field to display the following screen. Figure 63 Security: WP A-PSK, W P A2-PSK or WP A2-PSK-MIX The following table describes the labels not previou[...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 11 2 7.10 Introduction to RADIUS RADIUS is based on a client-sever model that supports authentication and accounting, where the access point is the client and the server is the RADIUS server . The RADIUS server handles the following tasks, among others: • Authenticati[...]

Chapter 7 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 11 3 Backup If the ZyXEL Device ca nnot communicate with the Primary accounting server , you can have the ZyXEL Device use a Backu p RADIUS server . Make sure the Active check boxes are selected if you want to use backup servers. The ZyXEL Device will attempt to communi[...]

Chapter 7 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 11 4[...]

ZyXEL NWA-3160 Series User’s Guide 11 5 C HAPTER 8 MBSSID and SSID This chapter describes how to configure and use your ZyXEL Device’ s MBSSID mode and configure SSID profiles. 8.1 Wireless LAN Infrastructures See the W ireless LAN chapter for some basic WLAN scenarios and terminology . 8.1.1 MBSSID T raditionally , you needed to u se different[...]

Chapter 8 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 11 6 Figure 65 Multiple BSS with VLAN Example 8.1.5 Configuring Multiple BSSs Click WIRELESS > Wir eless and select MBSSID in the Operating Mode drop-down list box to display the screen as shown. Figure 66 Wireless: Multiple BSS[...]

Chapter 8 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 11 7 The following table describes the labels in this screen. T able 35 Wireless: Multiple BSS LABEL DESCRIPTION Operating Mode Select MBSSID in this field to display the screen as shown 802.1 1 Mode Select 802.1 1b Only to allow only I EEE 802.1 1b compliant WLAN devices to associate w[...]

Chapter 8 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 11 8 8.2 SSID When the ZyXEL Device is set to Access Point, AP+Bridge or MBSSID mode, you need to choose the SSID profile(s) you want to use in your wireless network (see Section 6.6 on page 90 for more information on operating modes). Use the WIRELESS > SSID screen to see informatio[...]

Chapter 8 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 11 9 Figure 67 SSID The following table describes the labels in this screen. 8.2.2 Configuring SSID Each SSID profile references the settings configured in the following screens: T able 36 SSID LABEL DESCRIPTION Index This field displays the index number of each SSID profile. Name This [...]

Chapter 8 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 120 • WIRELESS > Security (one of the security profil es). • WIRELESS > RADIUS (one of the RADIUS profiles). • WIRELESS > MAC Filter (the MAC filter list , if activated in the SSID profile). • WIRELESS > Layer 2 Isolation (the layer 2 isolation list, if activated in [...]

Chapter 8 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 121 QoS Select the Quality of Service priority for this BSS’ s traffic. • In the pre-configured V oIP_SSID profile, the QoS setting is Vo I P . This is not user-con figurable. The Vo I P setting is avail able only on the Vo I P _ S S I D profile , and provides the highest level of Q[...]

Chapter 8 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 122[...]

ZyXEL NWA-3160 Series User’s Guide 123 C HAPTER 9 Other Wireless Configuration This chapter describes how to configure the Layer -2 Isolation and MAC Filter screens on your ZyXEL Device. 9.1 Layer-2 Isolation Introduction Layer-2 isol ation is used to prevent wireless clients associated with your ZyXEL Device from communicating with other wire le[...]

Chapter 9 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 124 Figure 69 Layer-2 Isolation Application MAC addresses that are not listed in the Allow devices with these MAC addresses table are blocked from communica ting with the ZyXEL Devi ce’ s wireless clients except for broadcast packets. Layer-2 isolation does not check th [...]

Chapter 9 Other Wi reless Configuration ZyXEL NWA-3160 Series User’s Guide 125 Figure 70 WIRELESS > Layer 2 Isolation The following table describes the labels in this screen. 9.3 Configuring Layer-2 Isolation T o configure layer-2 isolation, click WIRELESS > Layer-2 Isolation > Edit . The screen appears as shown. " If layer-2 isolat[...]

Chapter 9 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 126 Figure 71 WIRELESS > Layer-2 Isolat ion Configuration Screen The following table describes th e labels in this screen. 9.3.1 Layer-2 Isolation Examples The following section sho ws you example laye r -2 isolation configur ations on the ZyXEL Device ( A ). T able 39 [...]

Chapter 9 Other Wi reless Configuration ZyXEL NWA-3160 Series User’s Guide 127 " When configuring, remember to select the correct layer-2 isolat ion profile in the WIRELESS > SSID > Edit screen of the relevant SSID profile. Figure 72 Layer-2 Isolation Example Co nfiguration 9.3.1.1 Layer-2 Isolation Example 1 In the following example w[...]

Chapter 9 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 128 Figure 74 Layer-2 Isolation Example 2 9.4 The MAC Filter Screen The MAC filter function allows you to configur e the ZyXEL Device to give exclusive access to devices (Allow Association) or exclude de vices from accessing the ZyXEL Device (Deny Association). Every Ether[...]

Chapter 9 Other Wi reless Configuration ZyXEL NWA-3160 Series User’s Guide 129 The following table describes the labels in this screen. 9.4.1 Configuring MAC Filter ing T o change your ZyXEL Device ’ s MAC filter settings, click WIRELESS > MAC Filter > Edit . The screen appears as shown. Figure 76 MAC Addres s Filter T able 40 WIRELESS &g[...]

Chapter 9 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 130 The following table describes the labels in this screen. " T o activate MAC filtering on an SSID profi le, select the correct filter from the Enable MAC Filtering drop-down list box in the WIRELESS > SSID > Edit screen and click Apply . 9.5 Configuring Roami[...]

Chapter 9 Other Wi reless Configuration ZyXEL NWA-3160 Series User’s Guide 131 Figure 77 Roaming Example The steps below describe the roaming process. 1 W ireless station Y moves from the coverage area of access point AP 1 to that of access point AP 2 . 2 W ireless station Y sc ans and detects the signal of access point AP 2 . 3 W ireless station[...]

Chapter 9 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 132 Figure 78 Roaming Select the Roaming Active check box and click Apply .[...]

ZyXEL NWA-3160 Series User’s Guide 133 C HAPTER 10 IP Screen This chapter discusses how to conf igure IP on the ZyXEL Device. 10.1 Factory Ethernet Default s The Ethernet parameters of the ZyXEL Device are preset in the fact ory with the following values: 1 IP address of 192.168.1.2 2 Subnet mask of 25 5.255.255.0 (24 bits) These parameters shoul[...]

Chapter 10 IP Screen ZyXEL NWA-3160 Series User’s Guide 134 " Regardless of your p articular situation, do not create an arbitrary IP address; always follow the guidelines above. For more informa tion on address assignment, please refer to RFC 1597, Address Alloc ation for Private Internets and RFC 1466, Guidelines for Manage ment of IP Addr[...]

ZyXEL NWA-3160 Series User’s Guide 135 C HAPTER 11 Rogue AP This chapter discusses rogue wireless access poin ts (APs) and how to c onfigure the ZyXEL Device’ s rogue AP detection feature. 1 1.1 Rogue AP Introduction A rogue AP is a wireless access point operating in a network’ s coverage area that is not a sanctioned part of that network. Ro[...]

Chapter 11 Rogue AP ZyXEL NWA-3160 Series User’s Guide 136 Figure 80 Rogue AP: Example 1 1.2.1 “Honeypot” Att ack Rogue APs need not be co nnected to the legitimate network to pose a severe security threat. In the following example, an attacke r ( X ) is stationed in a vehicle outside a company building, using a rogue access point equipped wi[...]

Chapter 11 Rogue AP ZyXEL NWA-3160 Series User’s Guide 137 Figure 81 “Honeypot” Att a ck 1 1.3 Configuring Rogue AP Detection Y ou can configure the ZyXEL Device to detect rogue IEEE 802.1 1a (5 GHz - NW A-3160 only) and IEEE 802.1 1b/g (2.4 GHz) APs. If you have more than one AP in your wireless network, you must also configure the list of ?[...]

Chapter 11 Rogue AP ZyXEL NWA-3160 Series User’s Guide 138 Figure 82 ROGUE AP > Configuration The following table describes the labels in this screen. 1 1.3.2 Rogue AP: Friendly AP The friendly AP list displays deta ils of all the access points in your area that you know are not a threat. If you have mo re than one AP in your network, you need[...]

Chapter 11 Rogue AP ZyXEL NWA-3160 Series User’s Guide 139 Figure 83 ROGUE AP > Friendly AP The following table describes the labels in this screen. 1 1.3.3 Rogue AP List This list displays details of all IEEE 802.1 1a (NW A-3160 only) and IEEE 802.1 1b/g wireless access points within the ZyXEL Device’ s coverage area, except for the ZyXEL D[...]

Chapter 11 Rogue AP ZyXEL NWA-3160 Series User’s Guide 140 Figure 84 ROGUE AP > Rogue AP The following table describes the labels in this screen. T able 46 ROGUE AP > Rogue AP LABEL DESCRIPTION Rogue AP List This displays details o f access points in the ZyXEL Device’s coverage area that are not listed in the friendly AP list (see Section[...]

ZyXEL NWA-3160 Series User’s Guide 141 C HAPTER 12 Remote Management Screens This chapter provides information on the Remote Management screens. 12.1 Remote Management Overview Remote management allows you to determin e which services/protocols can access which of the ZyXEL Device’ s inte rfaces (if any) from which computers. Y ou may manage yo[...]

Chapter 12 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 142 12.2 Configuring T elnet Y ou can configure your ZyXEL Device for remote T elnet access as show n next. The administrator uses T elnet from a computer on a remote netw ork to access the ZyXEL Device. Figure 85 T elnet Configuration on a TCP/IP Network Click REMOTE MGNT t[...]

Chapter 12 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 143 12.3 Configuring FTP Y ou can upload and download the ZyXEL Devi ce’ s firmw are and configuration files using FTP , please see the chapter on firmware and configuration file maintenance for details. T o use this feature, your computer must have an FTP client. T o chan[...]

Chapter 12 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 144 12.4 Configuring WWW T o change your ZyXEL Device’ s W orld W ide W eb settings, click REMOTE MGNT > WWW . Figure 88 Remote Management: WWW The following table describes the labels in this screen. Secured Client IP Address A secured client is a “trusted” compute[...]

Chapter 12 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 145 12.5 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices. SNMP is a memb er of the TCP/IP protocol suite. Y our ZyXEL Device support s SNMP agent functiona lity , which allows a manager stat[...]

Chapter 12 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 146 Figure 89 SNMP Management Model An SNMP managed network consis ts of two main types of comp onent: ag ents and a manager . An agent is a management software module that resi des in a managed device (the ZyXEL Device). An agent translates the local manageme nt information[...]

Chapter 12 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 147 12.5.2 SNMP T rap s The ZyXEL Device can send the following traps to the SNMP manager . 12.6 SNMP T rap s Some traps include an SNMP in terface index. The following ta ble maps the SNMP interface indexes to the ZyXEL Device’ s physical and virtual ports. T able 51 SNMP[...]

Chapter 12 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 148 12.6.1 Configuring SNMP T o change your ZyX EL Device’ s SNMP settings, c lick REMOTE MGMT , then the SNMP tab. The screen appears as shown. Figure 90 Remote Management: SNMP The following table describes the labels in this screen. T able 53 Remote Managemen t : SNMP L[...]

Chapter 12 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 149 Apply Click Apply to save your customized settings and exit this screen. Reset Click Reset to begin configuring this screen afresh. T able 53 Remote Managemen t : SNMP LABEL DESCRIPTION[...]

Chapter 12 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 150[...]

ZyXEL NWA-3160 Series User’s Guide 151 C HAPTER 13 Internal RADIUS Server The ZyXEL Device can use its interna l RADIUS server to authenticate wireless clients. It ca n also serve as a RADIUS server to authenticate other APs and their wireless clients. For more background information on RADIUS, see Section 7.10 on page 1 12 . 13.1 Internal RADIUS[...]

Chapter 13 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 152 " The internal RADIUS server does not s upport domain accounts (DOMAIN/user). When you configure your W indows XP SP2 Wireless Zero Configuration PEAP/ MS-CHAPv2 settings, deselect the Use W indows logon name and p assword check box. When authentication beg ins, a pop-u[...]

Chapter 13 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 153 13.3 T rusted AP Overview A trusted AP is an AP that uses the ZyXEL De vice’ s internal RADIUS server to authenticate its wireless clients. Each wireless client must ha ve a user name and password configured in the AUTH. SER VER > T rusted Users screen. The following fi[...]

Chapter 13 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 154 Figure 92 T rusted AP Overview 1 Configure an IP address and shared secret in the T rusted AP database to authenticate an AP as a trusted AP . 2 Configure wireless client user names and passwords in the T rus ted Users database to use a trusted AP as a relay between the ZyXE[...]

Chapter 13 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 155 Figure 93 T rusted AP Screen The following table describes the labels in this screen. 13.5 Configuring T rusted Users A trusted user entry consists of a wireless client user name and password. T o configure trusted user entries, click AUTH SERV ER > T rusted Users . The s[...]

Chapter 13 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 156 Figure 94 T rusted Users Screen The following table describes the labels in this screen. T able 56 Trusted Users LABEL DESCRIPTION # This field displays the trusted user index number . Active Select this check box to have the ZyAIR authenticate wireless c lients with the sam[...]

ZyXEL NWA-3160 Series User’s Guide 157 C HAPTER 14 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 14.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users. Certificates are based on public -private key pairs. A certificate[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 158 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ). The ZyXEL Device can check a peer ’ s certifica[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 159 Figure 96 Certificate Details 4 Use a secure method to verify that the certificate owner ha s the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may vary according to your situation. Possible examples would be over the telephon e or through an HT[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 160 Figure 97 My Certificates The following table describes the labels in this screen. T able 57 My Certificates LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use. When you are using 80% or les[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 161 14.6 Certificate File Format s The certification authority certific ate that yo u want to import ha s to be in one of these file formats: • Binary X.509: This is an ITU-T recommen dation that defines th e formats for X.509 certificates. • PEM (Base-64) encoded X.509: This Priv acy[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 162 14.7 Importing a Certificate Click CER TIFICA TES > My Certificates and then Import to open the My Certificate Import screen. Follow the instructions in this sc reen to save an exis ting certificate to the ZyXEL Device. " Y ou can import only a certificate that matches a corre[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 163 14.8 Creating a Certificate Click CER TIFICA TES > My Certificates and then Create to open the My Certifica te Create screen. Use this screen to have the ZyXEL Device create a self-signed certificate, enroll a certificate with a certification authorit y or generate a certification [...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 164 Common Name Select a radio button to identify th e certifica te’s owner by IP address, domain name or e-mail address. T y pe the IP address (in dotted decimal notation), domain name or e-mail address in the field provide d. The domain name or e- mail address can be up to 31 ASCII ch[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 165 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request. After the ZyXEL Device successfully enrolls a ce rtificate or generates a certification request or a self-si[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 166 Figure 100 My Certificate Details The following table describes the labels in this screen. T able 60 My Certificate Details LABEL DESCRIPTION Name This field displays the identifying name of this certificate. If you want to change the name, type up to 31 characters to ident ify this c[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 167 Certificate Path Cl ick the Refresh button to have this read -only te xt box display the hierarchy o f certification authorities that validate th e ce rtificate (and th e certificate itself). If the issuing certification authority is one that you have imported as a trusted certificati[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 168 14.10 T rusted CAs Click CER TIFICA TES > T rusted CAs to open the Tr u s t e d C A s screen. This screen displays a summary list of certificates of the certification authorities that you ha ve set the ZyXEL Device to accept as trusted. The ZyXEL De vice accepts any valid certifica[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 169 The following table describes the labels in this screen. 14.1 1 Importing a T rusted CA ’ s Certificate Click CER TIFICA TES > T rusted CAs to open the T rusted CAs screen and then click Import to open the T rusted CA Import screen. Follow the instructions in this screen to save [...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 170 " Y ou must remove any sp aces from the certificate’ s filename before you can import the certificate. Figure 102 T rusted CA Import The following table describes the labels in this screen. 14.12 T rusted CA Certificate Det ails Click CER TIFICA TES > T rusted CAs to open th[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 171 Figure 103 T rusted CA Details The following table describes the labels in this screen. T able 63 T rusted CA Details LABEL DESCRIPTION Name This field displays the identifying name of this certificate . If you want to change the name, type up to 31 characters to i dentify this ke y c[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 172 Certifica te Information These read-only fields disp lay detailed information about the certificate . T ype This field displays genera l information about the certificat e. CA-signed me ans that a Certification Authorit y sig ned the certificate. Self-signed means that the certificate[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 173 SHA1 Fingerprin t This is the cert ificate’s message digest that the ZyXEL Device calculated using the SHA1 algo rithm. Y ou cannot use this va lue to verify that this is the remote host’s actual certificate because the ZyXEL Device has signed the certificate; thus causing this va[...]

Chapter 14 Certificates ZyXEL NWA-3160 Series User’s Guide 174[...]

ZyXEL NWA-3160 Series User’s Guide 175 C HAPTER 15 Log Screens This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. 15.1 Configuring V iew Log The web confi gurator allows you to look at a ll of the ZyXEL Device’ s logs in one location. Click LOGS > V iew Log . U se the Vi e w L o[...]

Chapter 15 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 176 15.2 Configuring Log Settings T o change your ZyXEL De vice’ s log settings, click LOGS > Log Settings . The scre en appears as shown. Use the Log Settings screen to configure to where and when the ZyX EL Device is to send the logs and which logs and/or im mediate alerts it is to[...]

Chapter 15 Log Screens ZyXEL NWA-3160 Series User’s Guide 177 The following table describes the labels in this screen. T able 65 Log Settings LABEL DESCRIPTI ON Address Info Mail Server Enter the server name or the IP address of the ma il server for the e-mail addresses specified below . If this field is left blank, logs and alert messages will n[...]

Chapter 15 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 178 15.3 Example Log Messages This section provides descriptions of some example log messages. T able 66 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informatio n from the time server . Time calibration failed The[...]

Chapter 15 Log Screens ZyXEL NWA-3160 Series User’s Guide 179 15.4 Log Commands Go to the command i nterpreter interface (the Comma nd Interpreter a ppendix explains how to access and use the commands). 15.4.1 Configuring What Y ou W ant the ZyXEL Device to Log Use the sys logs load command to load the log se tting buffer th at allows you to conf[...]

Chapter 15 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 180 15.4.2 Displaying Logs Use the sys logs display command to show all of the logs in the ZyXEL Device’s log. Use the sys logs category display command to show the log settings for all of the l og categories. Use the sys logs display [log category] command to show the logs in an indivi[...]

ZyXEL NWA-3160 Series User’s Guide 181 C HAPTER 16 VLAN This chapter discusses how to configure VLAN on the ZyXEL Device. 16.1 VLAN A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network can belong to one or more groups. Only stations within the same group can[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 182 16.2 Configuring VLAN The ZyXEL Device allows you to configure VL AN based on SSID profile (wireless VLAN), and / or based on your RA DIUS server (RADIUS VLAN). • When you use wireless VLAN, the ZyXEL Devi ce tags all packets from an SSID with the VLAN ID you set in the Wir eless VLA N scre[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 183 Figure 106 WIRELESS VLAN The following table describes the labels in this screen T able 70 WIRELESS VLAN FIELD DESCRIPTION Enable VIRTUAL LAN Select this box to enable VLAN tagging. Management VLAN ID Enter a numb er from 1 to 4094 to define this VLAN group. At least one device in your networ[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 184 16.2.2 RADIUS VLAN Click VLAN > RADIUS VLAN . The following screen appe ars. Figure 107 RADIUS VLAN VLAN ID Ente r a VLAN ID number from 1 to 4094. Packets coming from the WLAN using this SSID profile are tagged with the VLAN ID number by the ZyXEL Device . Different SSID profil es can use[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 185 The following table describes the labels in this screen. 16.2.3 Configuring Ma nagement VLAN Example This section shows you how to create a VLAN on an Ethernet switch. By default, the port on the ZyXEL Device is a member of the management VLAN (VLAN ID 1). The followi ng procedure shows you h[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 186 Figure 108 Management VLAN Con figuration Example Perform the following steps in the switch web configurator: 1 Click VLAN under Advanced Appli c ation . 2 Click St a t i c V L A N . 3 Select the ACTIVE check box. 4 Ty p e a Name for the VLAN ID. 5 Ty p e a VLAN Group ID . This should be the [...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 187 Figure 1 1 1 VLAN-Aware Switch - VLAN S tatus Follow the instructions in the Quick S tart Guide to set up yo ur ZyXEL Device for configuration. The ZyXEL Dev ice should be connected to the VLAN-aware switch. In the above example, the switch is using port 1 to connec t to your computer and po [...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 188 16.2.4 Configuring Microsof t’ s IAS Server Example Dynamic VLAN assignme nt can be used with the ZyXEL Device . Dynamic VLAN assignment allows network admi nistrators to assign a speci fic VLAN (configured on the ZyXEL Device) to an individual’ s W indows Us er Account. When a wireless s[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 189 Figure 1 13 New Global Security Grou p 2 In VLAN Group ID Pr operties , click the Members tab. • The IAS uses group memberships to determ ine whic h user accounts belong to which VLAN groups. Click the Add button and co nfigure the VLAN group details. 3 Repeat the previous step to add each [...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 190 •E n t e r a Policy friendly name that describes the policy . Each Remote Access Policy will be matched to one VLAN Gr oup. An example may be, Allow - VLAN 10 Policy . • Click Nex t . Figure 1 15 New Remote Access Po licy for VLAN Group 2 The Conditions window displays. Select Add to add [...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 191 Figure 1 17 Adding VL AN Group 6 When the Permissions options screen displays, select Grant r emote access permission . • Click Nex t to grant access based on group membership. • Click the Edit Profile button. Figure 1 18 Granting Permissions and User Pr ofile Screens 7 The Edit Dial-in P[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 192 Figure 1 19 Authentication T ab Settings 8 Click the Encryption tab. Select the St r o n g e s t encryption option. This step is not required for EAP-MD5, but is performed as a safeguard. Figure 120 Encryption T ab Settings 9 Click the IP tab and select the Client may re quest an IP address c[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 193 Figure 121 Connection Attributes Screen 11 The RADIUS Attribute screen displays. From the list, three RADIUS attributes will be added: • T unnel-Medium-T ype • T unnel-Pvt-Group-ID • T unnel-T ype • Click the Add button • Select T unnel-Medium-T ype • Click the Add button. Figure [...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 194 Figure 123 802 Attribute Setting for T unnel-Medium-T ype 13 Return to the RADIUS Attribute Sc reen shown as Figure 122 on page 193 . • Select T unnel-Pvt-Group-ID. • Click Add . 14 The Attribute Information screen displays. •I n t h e Enter the attribute value in: field select St r i n[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 195 Figure 125 VLAN Attribute Setting for T unnel-T ype 17 Return to the RADIUS Attribute Sc reen shown as Figure 122 on page 193 . • Click the Close button. • The completed Advanced tab configuration should rese mble the following screen. Figure 126 Completed Adva nced T ab " Repeat the[...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 196 16.2.5 Second Rx VLAN ID Example In this example, the ZyXEL Device is configured to tag packets from SSID01 with VLAN ID 1 and tag packets from SSID02 with VLAN ID 2. VLAN 1 and VLAN 2 have access to a server , S , and the Internet, as shown in the following figure. Figure 127 Second Rx VLAN [...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 197 5 Enter a Second Rx VLAN ID . The following screen shows SSID03 tagged with a VLAN ID of 3 and a Second Rx VLAN ID of 4 . Figure 128 Configuring SSID: Second Rx VLAN ID Example 6 Click Apply to save these settings. Outgoi ng packets from clients in SSID03 are tagged with a VLAN ID of 3 , and [...]

Chapter 16 VLAN ZyXEL NWA-3160 Series User’s Guide 198[...]

ZyXEL NWA-3160 Series User’s Guide 199 C HAPTER 17 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 17.1 Maintenance Overview The maintenanc e screens can help you view system in forma tion, upload new firmware, manage configuratio n and restart your ZyXEL Device. 17.2 Sys[...]

Chapter 17 Maintenance ZyXEL NWA-3160 Series User’s Guide 200 17.2.1 System St atistics Click Maintenance > Show S tatistics . Read-only information here includes port status, packet specific statistics and bridge link status . Also provided are "system up time" and "poll interval(s)". The Poll Interval field is configurabl[...]

Chapter 17 Maintenance ZyXEL NWA-3160 Series User’s Guide 201 Figure 131 Associa tion List The following table describes the labels in this screen. 17.4 Channel Usage The Channel Usage screen shows whether a channel is used by another wireless network or not. If a chan nel is being used, you should select a channel removed from it by five channel[...]

Chapter 17 Maintenance ZyXEL NWA-3160 Series User’s Guide 202 The following table describes the labels in this screen. 17.5 F/W Upload Screen Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, for exampl e "NW A-3100.bin". The upload process uses HTTP (Hypertext T rans[...]

Chapter 17 Maintenance ZyXEL NWA-3160 Series User’s Guide 203 1 Do not turn off the ZyXEL De vice while firmware upload is in progress! After you see the Firmware Upload in Pr ocess screen, wait two minutes before logging into the ZyXEL Device again. Figure 134 Firmware Uplo ad In Process The ZyXEL Device automatically restarts in this time causi[...]

Chapter 17 Maintenance ZyXEL NWA-3160 Series User’s Guide 204 Figure 136 Firmware Upload Error 17.6 Configuration Screen See Chapter 24 on page 229 for information on how to transf er configuration files using FTP/ TFTP commands. Click MAINTENANCE > Configuration . Information related to factory defaults, backup configuration, and rest oring c[...]

Chapter 17 Maintenance ZyXEL NWA-3160 Series User’s Guide 205 17.6.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your ZyXEL Device. 1 Do not turn off the ZyXEL De vice while configuration file upload is in progress. After you see a “restore configuration suc[...]

Chapter 17 Maintenance ZyXEL NWA-3160 Series User’s Guide 206 Figure 140 Configuration Upload Err or 17.6.3 Back to Factory Default s Pressing the Reset button in this section clears al l user-e ntered configuration information and returns the ZyXEL Device to its factory defau lts as shown on the screen. The following warning screen will appear .[...]

207 P ART III SMT and T roubleshooting Introducing the SMT (209) General Setup (215) LAN Setup (217) SNMP Configuration (219) System Password (221) System Information and Diagnosis (223) Firmware and Configuration File Maintenance (229) System Main tenance an d Information (235) T roubleshooting (243)[...]

208[...]

ZyXEL NWA-3160 Series User’s Guide 209 C HAPTER 18 Introducing the SMT This chapter describes how to access the SM T and provides an overview of its menus . 18.1 Introduction to the SMT T he ZyXEL Device’ s SMT (System Management T e rminal) is a menu-driven interface that you can access from a terminal emulator through th e console port or ove[...]

Chapter 18 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 210 Figure 143 Initial Screen 18.2.2 Entering the Password The login screen appears after you press [ENTER ], prompting you to enter the password, as shown below . For your first login, enter th e default password “1234”. As you type the password, the screen displays an “X?[...]

Chapter 18 Introdu cing the SMT ZyXEL NWA-3160 Series User’s Guide 21 1 " Whether or not you use administrato r authentication on RADIUS, you still use the local system p assword to log in via the console port. Please note that if there is no activity for long er than five minutes after you log in, your ZyXEL Device will automatically log yo[...]

Chapter 18 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 212 Figure 146 Menu 23 System Password 3 T ype your new system p a ssword in the New Password field (up to 30 characters), and press [ENTER]. 4 Re-type your new system password in the Retype to confirm field for confirmation and press [ENTER]. Note that as you type a password, the[...]

Chapter 18 Introdu cing the SMT ZyXEL NWA-3160 Series User’s Guide 213 Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . After you enter the password, the SMT di splays the main menu, as shown next. Figure 147 SMT Main Menu T able 80 Main Menu Commands OPERATION KE[...]

Chapter 18 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 214 18.6.1 System Manage ment T erminal Interface Summary T able 81 Main Menu Summary # MENU TITLE DESCRIPTION 1 General Setup Use this menu to set up your general information. 3 LAN Setup Use this menu to set up your LAN and WLAN connection. 22 SNMP Configuration Use this menu to[...]

ZyXEL NWA-3160 Series User’s Guide 215 C HAPTER 19 General Setup The chapter shows you th e information on general setu p. 19.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. The Domain Name entry is what is propagated to th e DHCP c[...]

Chapter 19 Gener al Setup ZyXEL NWA-3160 Series User’s Guide 216 IP Address Enter the IP addresses of the DNS servers. This field is available when you select User-Defin ed in the field above. When you have completed this menu, press [ ENTER ] at the prompt “Press ENTER to Confirm…” to save your configur ation, or press [ ESC ] at any time [...]

ZyXEL NWA-3160 Series User’s Guide 217 C HAPTER 20 LAN Setup This chapter shows you how to configure the LAN on your ZyXEL Device. 20.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup . Fr om the main menu, enter “3 ” to display menu 3. Figure 149 Menu 3 LAN Setup Detailed explanation about the LAN Se[...]

Chapter 20 LAN Set up ZyXEL NWA-3160 Series User’s Guide 218 Follow the instructions in the following table on how to configure the fields in this menu. T able 83 Menu 3.2 TCP/IP Setup FIELD DESCRIPTION IP Address Assignment Press [SP ACE BAR] and then [ENTER] to se lect Dynamic to have the ZyXEL Device obtain an IP address from a DHCP server . Y[...]

ZyXEL NWA-3160 Series User’s Guide 219 C HAPTER 21 SNMP Configuration This chapter explains SNMP Configuration me nu 22. See the web configurator chapter on SNMP for background information. 21.1 SNMP Configuration T o configure SNMP , select option 22 from the main menu to open Menu 22 – SNMP Configuration as shown next. The “community” for[...]

Chapter 21 SNMP Configuration ZyXEL NWA-3160 Series User’s Guide 220 Destination T ype the IP address of the station to send your SNMP traps to. When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen. T able[...]

ZyXEL NWA-3160 Series User’s Guide 221 C HAPTER 22 System Password This chapter describes how to configure the ZyXEL Device’ s system password. 22.1 System Password Y ou can configure the system password in this menu. Refer to Section 18.4 on page 21 1 . Figure 152 Menu 23 System Password Y ou should change the default password. If y ou forget [...]

Chapter 22 System Password ZyXEL NWA-3160 Series User’s Guide 222[...]

ZyXEL NWA-3160 Series User’s Guide 223 C HAPTER 23 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system software. This chapte r describes how to use these tools in det[...]

Chapter 23 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 224 Figure 154 Menu 24.1 System Maintenan ce: St atus The following table describes the fields present in this menu. Menu 24.1 - Sys tem Maintenance - Status 00:15:06 Sat. Jan. 01, 2000 Port Status TxPkts RxP kts Cols Tx B/s Rx B/s Up Time Ethernet 100M/Full 761 366 0 [...]

Chapter 23 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 225 23.2 System Information T o get to the System Information: 1 Enter “24” to display Menu 24 – System Maintenance . 2 Enter “2” to display Menu 24.2 – System Information and Console Port Speed . 3 From this menu you have two choices as shown in the ne xt [...]

Chapter 23 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 226 23.2.2 Console Port Speed Y ou can set up different port speeds for the console port through Menu 24.2.2 – System Maintenance – Console Port Speed . Y our ZyXEL Device supports 96 00 (default), 19200, 38400, 57600 and 11520 0 bps console port sp eeds. Press [SP[...]

Chapter 23 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 227 Figure 158 Menu 24.3 System Maintenance: Log and T race 3 Enter 1 from Menu 24.3 – System Maintenance – Log and T race and press [ENTER] twice to display the error log in the system. After the ZyXEL Device finishes di splaying the error log, you w ill have the [...]

Chapter 23 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 228 The following table describes the diagnostic te sts available in menu 24.4 for your ZyXEL Device and the connections. T able 87 Menu 24.4 System Maintenance Menu: Diagno stic FIELD DESCRIPTION Ping Host Ping the host to see if the links and TC P/IP protocol on both[...]

ZyXEL NWA-3160 Series User’s Guide 229 C HAPTER 24 Firmware and Configuration File Maintenance This chapter tells y ou how to backup an d restor e your configuration file as well as upload new firmware and configuratio n files using the SMT screens. 24.1 Filename Conventions The configuration file (often ca lled the romfile or rom-0) contai ns th[...]

Chapter 24 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 230 The following table is a summary . Please note that the internal filename refe rs to the filename on the ZyXEL Device and the external filename refers to the filename not on the ZyXEL Device, that is, on your comp uter, local network or FTP site and so[...]

Chapter 24 Firmw are and Co nfiguration File Maintenance ZyXEL NWA-3160 Series User’s Guide 231 Figure 161 FTP Session Example The following table describes some of the co mmands that you may see in third party FTP clients. 24.2.2 Backup Configuration Using TFTP The ZyXEL Device supports the up/downlo ading of the firmware and the configuration f[...]

Chapter 24 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 232 5 Use the TFTP client (see the example belo w) to transfer files between the ZyXEL Device and the computer . The file na me for the configuration file is rom-0 (rom-zer o , not capital o). Note that the telnet co nnection must be active and the SMT in [...]

Chapter 24 Firmw are and Co nfiguration File Maintenance ZyXEL NWA-3160 Series User’s Guide 233 4 Enter “root” and your SMT passwo rd as requested. The default is 1234. 5 Enter “bin” to set transfer mode to binary . 6 Use “put” to transfer files from the computer to the ZyXEL Device for example “put firmware.bin ras” transfers th [...]

Chapter 24 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 234 Note that the telnet co nnection must be active and the SMT in CI mode b efore and during the TFTP transfer . For details on TFTP commands (see following example), please consult the documentation of your TFTP client program. Fo r UNIX, use “get” t[...]

ZyXEL NWA-3160 Series User’s Guide 235 C HAPTER 25 System Maintenance and Information This chapter leads you through SM T menus 24.8 and 24.10. 25.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware. The CI provides much of the same functionality as the SMT , while a dding some low-level se tup and diagn[...]

Chapter 25 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 236 Figure 164 V alid CI Commands 25.1.1 Command Synt ax • The command keywords are in courier new font. • Enter the command keywords exactly as shown, do not abbreviate. • The required fields in a command are enclose d in angle brackets <> . • The opti[...]

Chapter 25 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 237 25.2 T ime and Date Setting The ZyXEL De vice keeps track of t he time and date. There is also a software mechanism to set the time manually or get the current time an d date from an external server when you turn on your ZyXEL Device. Menu 24. 10 allows you to [...]

Chapter 25 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 238 25.2.1 Resetting the T ime The ZyXEL Device resets the time in three instances: 1 On leaving menu 24.10 after making changes. 2 When the ZyXEL Device starts up, if there is a timeserver configured in menu 24.10. 3 24-hour intervals after starting. 25.3 Remote Man[...]

Chapter 25 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 239 Figure 166 T elnet Configuration on a TCP/IP Network 25.3.2 FTP Y ou can upload and download ZyXEL Dev ice fi rmware and configuratio n files using FTP . T o use this feature, your computer mu st have an FTP client. 25.3.3 We b Y ou can use the ZyX EL Device’[...]

Chapter 25 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 240 Figure 167 Menu 24.1 1 Remote Ma nagement Control The following table describes the fields in this menu. Menu 24.11 - Re mote Management Control TELNET Server: Port = 23 Access = ALL Secure Clien t IP = 0.0.0.0 FTP Server: Port = 21 Access = ALL Secure Clien t IP[...]

Chapter 25 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 241 25.3.5 Remote Management Limit ations Remote management over LAN or W AN will not work when: 1 Y ou have disabled that service in menu 24.1 1. 2 The IP address in the Secured Client IP field (menu 24.1 1) does not match the client IP address. If it does not mat[...]

Chapter 25 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 242[...]

ZyXEL NWA-3160 Series User’s Guide 243 C HAPTER 26 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access • W ireless Router/A P T roubles hooti[...]

Chapter 26 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 244 26.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device. 1 The default IP address is 192.168.1.2 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP address o f the ZyXEL Device by looking up th e IP address of the default gate [...]

Chapter 26 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 245 Advanced Suggestions • T ry to access the ZyXEL Device using anot her service, such as T elnet. If you can access the ZyXEL Device, check the remote manage ment settings to find out why the ZyXEL Device does not respond to HTTP . • If your computer is connected to the WA N por[...]

Chapter 26 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 246 26.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. Se e the Quick S tart Guide and Section 26.1 on pa ge 243 . 2 Make sure you entered your ISP account in formation correctly . These fields are[...]

Chapter 26 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 247 26.4 Wireless Router/AP T roubleshooting V I cannot access the ZyXEL Device or ping a ny computer from the WLAN. 1 Make sure the wireless LAN is enabled on the ZyXEL Device 2 Make sure the wireless adapter on the wireless station is working properly . 3 Make sure the wireless adap[...]

Chapter 26 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 248[...]

249 P ART IV Appendices and Index Product Specification s (251) Power over Ethernet (PoE ) Specifications (259) Power Adaptor Specifications (261) Setting up Y our Computer ’ s IP Address (263) W ireless LANs (269) Pop-up W indows, JavaScripts and Java Permissions (283) IP Addresses and Subnetting (289) T ext File Based Auto Configuration (297) L[...]

250[...]

ZyXEL NWA-3160 Series User’s Guide 251 A PPENDIX A Product S pecifications The following tables summarize the ZyXEL De vice’ s hardware and firmware features. T able 94 Hardware Specifications SPECIFICATIO N DESCRIPTION Dimensions 190x 135 x 4 0 mm Weight 420g Power 12V DC, 1.5 A max. (There is no to lerance for the DC in put voltage.) Ethernet[...]

Appendix A Product Specifications ZyXEL NWA-3160 Series User’s Guide 252 Distance between the centers of the holes (for wall mounting) on the device’s back. 125 mm Recommended type of screws for wall-mounting M4 T ap Screw (i ncluded), see Figure 169 on page 254 . Approvals EMC: FCC Class B, CE-EMC Class B, C-T ick Class B, Safety: CSA Internat[...]

Appendix A Product Specifications ZyXEL NWA-3160 Series User’s Guide 253 W all-mounting Instructions Complete the following step s to hang your ZyXEL Device on a wall. " See T able 94 on p age 251 for the size of screws to use and how far ap art to place them. 1 Select a position free of obstructions on a sturdy wall. 2 Drill two holes for t[...]

Appendix A Product Specifications ZyXEL NWA-3160 Series User’s Guide 254 4 Make sure the scre ws are snugly fastened to the wall. They need to hold the weight of the ZyXEL Device with the connection cables. 5 Align the holes on the back of the ZyXEL De vice with the screws on the wall. Hang the ZyXEL Device on the scre ws. Figure 168 W all-mounti[...]

Appendix A Product Specifications ZyXEL NWA-3160 Series User’s Guide 255 Power Adaptor Specifications Power over Ethernet (PoE) S pecifications Y ou can use a power over Et hernet injector to power this device . The injector must comply to IEEE 802.3af. T able 96 North Am erican Plug St andards AC Power Adaptor Mo del ADS6818-1812-W 1215 Input Po[...]

Appendix A Product Specifications ZyXEL NWA-3160 Series User’s Guide 256 T able 101 Power over Ethernet Injector RJ- 4 5 Port Pin Assignments PIN NO RJ-45 SIGNAL ASSIGNMENT 1 Output T ransmit Data + 2 Output T ransmit Data - 3 Receive Data + 4 Power + 5 Power + 6 Receive Data - 7 Power - 8 Power - 123456 78[...]

ZyXEL NWA-3160 Series User’s Guide 257 A PPENDIX B Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later opera ting systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/I[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 258 Figure 170 WIndows 95/98 /Me: Networ k: Configuratio n Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microsoft Netwo rks. If you need the [...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 259 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically . • If you have a static IP[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 260 Figure 172 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field a[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 261 Figure 173 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 174 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 262 Figure 175 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties . Figure 176 Windows XP: Local Area Conne ction Properties 5 The Internet Protocol TCP/IP Prop[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 263 Figure 177 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installe d gateways in the IP Settin gs tab and click OK . Do one or more of the fo llowing if you want to configure additi onal IP add[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 264 If you have previously co nfigured DNS servers, click Advanced and then the DNS tab to order them. Figure 178 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click OK to close the Lo[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 265 Figure 179 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 180 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 266 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyXEL Device in the Router address box. 5 Close the TCP/IP Contr ol Panel . 6 Click Save if prompted, to save chan ges to you[...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 267 Figure 182 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP [...]

Appendix B Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 268[...]

ZyXEL NWA-3160 Series User’s Guide 269 A PPENDIX C W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless adapters (A, B, C). An y time two [...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 270 Figure 184 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type o[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 271 Figure 185 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your ge ographical area. Y ou may have a choice of channels (for your region) so you should use a dif ferent channel th an an adjacent[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 272 Figure 186 RTS /C T S When station A sends data to the AP , it might not know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 273 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size. Preamble T ype Preamble is used to [...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 274 W ireless security methods availabl e on the ZyXEL Device are data encryption, wireless client authentication, restricting access by devi ce MAC address and hiding the ZyXEL Device identity . The following figure shows th e relative effectiveness of th ese wireless security methods a[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 275 Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity . RADIUS is a simple package exchange in whic h your AP acts as a message rela y between the wireless client and the[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 276 For EAP-TLS authentication type, you must firs t hav e a wired connection to the network and obtain the certificate(s) from a certificate authorit y (CA). A certificate (als o called digital IDs) can be used to authenticate users and a CA issu es certificates and guar antees the iden[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 277 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS se rver . This key expires when the wireless connection times out, disconnects or reauthentic ation times out. A new WEP key is generated each time r eauthentication is performed. If this feature is[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 278 Encryption Both WP A and WP A2 improve data encryp tion by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.1x. WP A and WP A2 use Advanced Encryption S tandard (AES) in the Counter mode with Cipher block chaining Message authentication code [...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 279 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk Software's Odyss[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 280 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them. Figure 188 WP A(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other secur ity parameters you should configure for each Authentication Metho[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 281 Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11 b) or 5GHz(IEEE 802.1 1a) is needed to communicate efficiently in a wireless LAN. Radiation Pattern A radiation pattern is a diagra m that allows you to visualize the shape of the antenna’ s covera[...]

Appendix C Wireless LANs ZyXEL NWA-3160 Series User’s Guide 282 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenn a down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as po[...]

ZyXEL NWA-3160 Series User’s Guide 283 A PPENDIX D Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). " Internet Explorer 6 screens are u sed here. Screens [...]

Appendix D Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 284 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have enabled . Figure 190 Internet Options: Privacy 3 Click Apply to save this setting. Enable pop-up Blockers with Ex[...]

Appendix D Pop-up Windows, JavaScripts and Java Per m issions ZyXEL NWA-3160 Series User’s Guide 285 Figure 191 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allo[...]

Appendix D Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 286 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , ch eck that JavaScripts are allowed. 1 In Internet Explorer , click T o[...]

Appendix D Pop-up Windows, JavaScripts and Java Per m issions ZyXEL NWA-3160 Series User’s Guide 287 Figure 194 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions mak[...]

Appendix D Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 288 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Adva nced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the window . Figure 196 Java (Sun)[...]

ZyXEL NWA-3160 Series User’s Guide 289 A PPENDIX E IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking de[...]

Appendix E IP Addre sses and Subnetting ZyXEL NWA-3160 Series User’s Guide 290 Figure 197 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are par[...]

Appendix E IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 291 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the maximum number of [...]

Appendix E IP Addre sses and Subnetting ZyXEL NWA-3160 Series User’s Guide 292 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the[...]

Appendix E IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 293 Figure 199 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). [...]

Appendix E IP Addre sses and Subnetting ZyXEL NWA-3160 Series User’s Guide 294 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. Ta b l e 11 1 Subn et 2 IP/SUBNET MASK NETWORK NUMBER LAST O CTET BIT[...]

Appendix E IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 295 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 22[...]

Appendix E IP Addre sses and Subnetting ZyXEL NWA-3160 Series User’s Guide 296 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.[...]

ZyXEL NWA-3160 Series User’s Guide 297 A PPENDIX F T ext File Based Auto Configuration This chapter describes how admini strators can use text configuration files to configure the wireless LAN settings for multiple APs. T ext File Based Auto Configuration Overview Y ou can use plain text configuration files to configure the wireless LAN settings [...]

Appendix F Text File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 298 " If adjacent APs use the same c onfiguration file, you should leave out the channel setting since they could in terfere with each other ’s wire less traffic. Auto Configuration by DHCP A DHCP response can use options 66 and 67 to assign a TFTP server IP [...]

Appendix F Text File Ba sed Auto Con figuration ZyXEL NWA-3160 Series User’s Guide 299 V erifying Y our Configuration File Upload Via SNMP Y ou can use SNMP management software t o disp lay the configuration file version cu rrently on the device by using the fol lowing MIB. T roubleshooting Via SNMP If you have any dif ficulties with the configur[...]

Appendix F Text File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 300 If there are any errors while processing the config uration file, the AP generates a message with the line number and reason for the first error (s ubsequent errors during the processing of an individual config uration file are not recorded). Y ou can use SNMP m[...]

Appendix F Text File Ba sed Auto Con figuration ZyXEL NWA-3160 Series User’s Guide 301 Figure 203 802.1X Configuration File Example Figure 204 WP A-PSK Configuration File Example !#ZYXEL PROWLAN !#VERSION 12 wcfg security 2 name Test-8021x wcfg security 2 mode 8021x-static12 8 wcfg security 2 wep key1 abcdefghijk lm wcfg security 2 wep key2 bcdef[...]

Appendix F Text File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 302 Figure 205 WP A Configuration File Example Wlan Command Configuration File Example This example configur ation file uses the wlan command to configure the AP to use the security and SSID profiles from the wcfg command co nfiguration f ile examples and general wi[...]

Appendix F Text File Ba sed Auto Con figuration ZyXEL NWA-3160 Series User’s Guide 303 Figure 206 Wlan Configuration File Example !#ZYXEL PROWLAN !#VERSION 15 wcfg ssid 1 name ssid-wep wcfg ssid 1 security Test-wep wcfg ssid 2 name ssid-8021x wcfg ssid 2 security Test-8021x wcfg ssid 2 radius radius-rd wcfg ssid 3 name ssid-wpapsk wcfg ssid 3 sec[...]

Appendix F Text File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 304[...]

ZyXEL NWA-3160 Series User’s Guide 305 A PPENDIX G Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, [...]

Appendix G Legal Information ZyXEL NWA-3160 Series User’s Guide 306 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving ante[...]

Appendix G Legal Information ZyXEL NWA-3160 Series User’s Guide 307 Vie wing Certifications 1 Go to http://www .zyxel.com . 2 Select your product on the ZyXEL home pag e to go to that product's page. 3 Select the certification you wish to view from this page. ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that t[...]

Appendix G Legal Information ZyXEL NWA-3160 Series User’s Guide 308[...]

ZyXEL NWA-3160 Series User’s Guide 309 A PPENDIX H Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps you took to solv e it.[...]

Appendix H Custo mer Support ZyXEL NWA-3160 Series User’s Guide 310 • Re g u la r M ai l : ZyXEL Communications, Czech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb: www .zyxel.dk[...]

Appendix H Customer Support ZyXEL NWA-3160 Series User’s Guide 31 1 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91 -11-308 88153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .zyxel.in • Re g u l ar M ai l : India - ZyXEL T echnology Indi a Pvt Ltd. , I I -[...]

Appendix H Custo mer Support ZyXEL NWA-3160 Series User’s Guide 312 • Re g ul a r Ma i l: ZyXEL Communications Inc., 1 130 N. Miller St., Anaheim, CA 92 806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • W eb: www .zyxel.no • Re g u la r M[...]

Appendix H Customer Support ZyXEL NWA-3160 Series User’s Guide 313 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .zyxel.se • Re g ul a r M a i l: ZyXEL Communications A/S, Sjöporten 4, 41764 Götebor g, Sweden Thailand • Support E-mail: supp[...]

Appendix H Custo mer Support ZyXEL NWA-3160 Series User’s Guide 314[...]

Index ZyXEL NWA-3160 Series User’s Guide 315 Index A access 34 access point 34 access privileges 36 address assignment 133 address filtering 33 administrator authentication on RADIU S 78 Advanced Encryption St andard See AES. AES 278 alternative subnet mask notation 291 antenna 251 directional 281 gain 281 omni-directional 281 AP 33 , 34 , 35 , 1[...]

Index ZyXEL NWA-3160 Series User’s Guide 316 DiffServ marking rule 88 disclaimer 305 Distribution System 84 DS field 87 DSCPs 87 Dynamic Frequency Selection 90 dynamic WEP key exchange 277 E EAP 99 , 100 EAP authentication 275 encryption 36 , 101 , 278 error log 226 error/information messages sample 227 ESS 84 , 270 ESS IDentification 84 ESSID 24[...]

Index ZyXEL NWA-3160 Series User’s Guide 317 MAC address filter actio n 130 MAC filter 37 , 99 , 128 MAC filtering 253 MAC service dat a unit 92 , 95 , 11 7 main menu 213 maintenance 33 management 33 Management Information Base (MIB) 146 management VLAN 185 managing the device good habits 38 using FTP . See FTP . using T elnet. See command interf[...]

Index ZyXEL NWA-3160 Series User’s Guide 318 RTS/CTS handshake 92 , 95 , 11 7 S safety warnings 6 screws 253 security 34 security profiles 33 server 33 Service Set 92 , 11 7 Service Set Identifier see SSID SMT 212 SMT menu overview 212 SNMP 145 , 25 3 community 219 configuration 219 manager 146 MIBs 146 traps 147 trusted host 21 9 S panning T ree[...]

Index ZyXEL NWA-3160 Series User’s Guide 319 web 144 web configurator 33 , 41 , 43 WEP 33 WEP encryption 99 , 106 Wi-Fi Multimedia QoS 85 Wi-Fi Protected Access 33 , 277 wired network 33 , 34 wireless channel 247 wireless client WP A supplicants 104 , 27 9 Wireless Distribution System (WDS) 36 wireless Internet connection 34 wireless LAN 247 wire[...]

Index ZyXEL NWA-3160 Series User’s Guide 320[...]