Page 1 User’s Guide NWA50AX 802.11ax (WiFi6) Dual-Radio PoE Access Point Version 6.20 Edition 1, 5/2021 Default Login Details Management IP http://DHCP-assigned IP Address http://192.168.1.2 User Name admin Password 1234 Copyright © 2021 Zyxel and/ or its affiliates. All rights reserved.
Page 2 See this User’s Guide for instructions on using the NXC as an AP Controller (AC) for the Zyxel Device. This is used when the Zyxel Device is set to be managed by a Zyxel AC. • More Information Go to to find other information on the Zyxel Device suppo rt.zyxe l.c o m NWA50AX User’s Guide...
Page 3: Do C Um E Nt C O Nve Ntio Ns
Figures in this guide may use the following generic icons. The Zyxel Device icon is not an exact representation of your device. Zyxel Device Router Switch Internet Server Desktop Laptop AP Controller Printer Nebula Switch Nebula Gateway Smart T.V. IP Phone NWA50AX User’s Guide...
Page 4: Table Of Contents
L o c a l C o nfig ura tio n in C lo ud Mo de ....................185 Cloud Mode ............................186 Network ............................... 189 Maintenance ............................192 Appe ndic e s a nd T ro ub le sho o ting ....................197 Troubleshooting ..........................198 NWA50AX User’s Guide...
Page 5: Table Of Contents
3.1.1 Zyxel Device LED ........................28 C ha pte r 4 We b C o nfig ura to r..........................30 4.1 Overview ............................30 4.2 Accessing the Web Configurator ....................30 4.3 Navigating the Web Configurator ....................33 NWA50AX User’s Guide...
Page 6 8.3 Network Status ..........................55 8.3.1 Port Statistics Graph ......................56 8.4 Radio List ............................57 8.4.1 AP Mode Radio Information ....................59 8.5 Station List ............................61 8.6 WDS Link Info ........................... 62 8.7 Detected Device ..........................63 NWA50AX User’s Guide...
Page 7 12.1.2 What You Need To Know ....................93 12.2 Radio .............................. 94 12.2.1 Add/Edit Radio Profile ......................95 12.3 SSID ............................... 100 12.3.1 SSID List ..........................101 12.3.2 Add/Edit SSID Profile ......................102 12.4 Security List ..........................105 12.4.1 Add/Edit Security Profile ....................105 NWA50AX User’s Guide...
Page 8 16.2 Host Name ........................... 138 16.3 Date and Time ........................... 139 16.3.1 Pre-defined NTP Time Servers List ..................141 16.3.2 Time Server Synchronization .................... 142 16.4 WWW Overview .......................... 143 16.4.1 Service Access Limitations ....................143 16.4.2 System Timeout ........................143 NWA50AX User’s Guide...
Page 9 19.1.1 What You Can Do in this Chapter ................... 178 19.2 Diagnostics ..........................178 19.3 Remote Capture ........................179 C ha pte r 20 L EDs ..............................180 20.1 Overview ............................. 180 20.1.1 What You Can Do in this Chapter ................... 180 NWA50AX User’s Guide...
Page 10 25.1.1 What You Can Do in this Chapter ................... 192 25.2 Shell Script ............................ 192 25.3 Diagnostics ..........................193 25.4 View Log ............................194 Pa rt III: Appe ndic e s a nd T ro ub le sho o ting ..........197 NWA50AX User’s Guide...
Page 11 26.6 Resetting the Zyxel Device ......................205 26.7 Getting More Troubleshooting Help ..................205 Appendix A Importing Certificates ....................206 Appendix B IPv6..........................230 Appendix C Customer Support ..................... 238 Appendix D Legal Information ...................... 244 Inde x ..............................251 NWA50AX User’s Guide...
Page 12: Introduction
) with weak security settings, the network becomes exposed to threats. The RF monitor ( ) scans the area to detect all APs, which can help the network administrator discover these rogue APs and remove them or use the NXC to quarantine them. NWA50AX User’s Guide...
Page 13: Root Ap
Zyxel Device in Repeater mode ( ) at the same time. act as repeaters that forward traffic between associated wireless clients and the wired LAN. Clients access the AP and the wired network behind the AP through repeaters NWA50AX User’s Guide...
Page 14: Radio Frequency (Rf) Monitor
NXC (see Section 2.2 on page 22). If the Zyxel Device’s radio setting is set to MO N (RF Monitor mode), it will serve as a dedicated RF monitor and its AP clients are disconnected. Mo de NWA50AX User’s Guide...
Page 15 MO NIT O R > Wire le ss > De te c te d De vic e Select an AP or APs in the list and click Ma rk a s Ro g ue AP Ma rk a s Frie ndly AP NWA50AX User’s Guide...
Page 16: Sample Feature Applications
In this example, the G ue st_SSID guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet. NWA50AX User’s Guide...
Page 17: Dual-Radio
Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming. NWA50AX User’s Guide...
Page 18: Zyxel Device Product Feature
Number of Wireless Radios Monitor Mode & Rogue APs Containment Rogue AP Detection WDS (Wireless Distribution System) - Root AP & Repeater Modes Tunnel Forwarding Mode Layer-2 Isolation Supported PoE Standards IEEE 802.3at Power Detection External Antennas Internal Antennas NWA50AX User’s Guide...
Page 19 802.11k/v Assisted Roaming Bluetooth Low Energy (BLE) USB Port for BLE Ethernet Storm Control Grounding Power Jack Maximum number of log messages 512 event logs A. For NXC managed devices only. See the NXC User’s Guide for details. NWA50AX User’s Guide...
Page 20: Ap Management
Zyxel Nebula cloud-based network management system. This means you can manage devices remotely without the need of connecting to each device directly. It offers many features to better manage and monitor not just the Zyxel Device, but your network as a whole, including supported NWA50AX User’s Guide...
Page 21 It graphically presents your device/network statistics and shows an overview of your network topology, as shown in the following figure. It also sends reports, alerts, and notifications for events, such as when a site goes offline. Traffic Monitoring Graph From NCC Fig ure 5 NWA50AX User’s Guide...
Page 22: Switching Management Modes
At the time of writing, the ZON Utility is compatible with: • Windows 7 (both 32-bit / 64-bit versions) • Windows 8 (both 32-bit / 64-bit versions) • Windows 8.1 (both 32-bit / 64-bit versions) • Window 10 (both 32-bit / 64-bit versions) NWA50AX User’s Guide...
Page 23: Run The Zon Utility
If you want to check the supported models and firmware versions later, you can click the Sho w icon in the upper right hand corner of the screen. Then select the info rm a tio n a b o ut ZO N Suppo rte d NWA50AX User’s Guide...
Page 24 Select a network adapter to which your supported devices are connected. Network Adapter Fig ure 8 Click the button for the ZON Utility to discover all supported devices in your network. Discovery Fig ure 9 The ZON Utility screen shows the devices discovered. NWA50AX User’s Guide...
Page 25 Zyxel website to your computer and unzipped it in advance. 8 Change Password Use this icon to change the admin password of the selected device. You must know the current admin password before changing to a new one. NWA50AX User’s Guide...
Page 26: Ways To Access The Zyxel Device
The Web Configurator allows easy Zyxel Device setup and management using an Internet browser. If your Zyxel Device is managed by the NCC or an AC, use this only for troubleshooting if you cannot connect to the Internet. This User’s Guide provides information about the Web Configurator. NWA50AX User’s Guide...
Page 27: Good Habits For Managing The Zyxel Device
Zyxel Device to its factory default settings. If you backed up an earlier configuration file, you will not have to totally re-configure the Zyxel Device; you can simply restore your last configuration. NWA50AX User’s Guide...
Page 28: Hardware
(ON) or OFF after the Zyxel Device is ready. Refer to Chapter 20 on page 180 for the LED Suppre ssio n menus in standalone mode. L o c a to r 3.1.1 Zyxe l De vic e L ED NWA50AX LED Fig ure 12 NWA50AX User’s Guide...
Page 29 Fast Blinking (On for 50 The Zyxel Device is undergoing firmware upgrade. milliseconds, Off for 50 milliseconds) Slow Blinking (Blink for 3 The Uplink port of the Zyxel Device in standalone mode is times, Off for 3 seconds) disconnected. NWA50AX User’s Guide...
Page 30: Web Configurator
Browse to the Zyxel Device’s DHCP-assigned IP address or http://192.168.1.2. The screen appears. If L o g in you are in NCC mode, check the NCC’s screen for the Zyxel Device’s LAN IP AP > Mo nito r > Ac c e ss Po int address. NWA50AX User’s Guide...
Page 31 Ne b ula Mo de Nebula Control Center (NCC) or access the link to the NCC, as shown in the following figure. Otherwise, continue with the next step. The NCC is a cloud-based network management system that allows you to NWA50AX User’s Guide...
Page 32 Otherwise, the dashboard appears. screen appears every time you log in using the default user name and default Upda te Adm in Info password. If you change the password for the default user account, this screen does not appear anymore. NWA50AX User’s Guide...
Page 33: Navigating The Web Configurator
The Web Configurator’s Main Screen for Standalone Mode Fig ure 13 The Web Configurator’s Main Screen for Cloud Mode Fig ure 14 The Web Configurator’s main screen is divided into these parts: • - Title Bar • - Navigation Panel • - Main Window NWA50AX User’s Guide...
Page 34: Title Bar
Click this to open the NCC web site login page in a new tab or window. Site Ma p Click to see an overview of links to the Web Configurator screens. Click a screen’s link to go to Site MAP that screen. Site Map Fig ure 16 NWA50AX User’s Guide...
Page 35: Navigation Panel
The following are the screens available in standalone mode. Note that some screens may not be available for your Zyxel Device model. See Section 1.4 on page 18 to see which features your Zyxel Device model supports. NWA50AX User’s Guide...
Page 36 Create and manage wireless SSID, security, MAC filtering, and layer-2 isolation files that can be associated with different APs. MON Profile MON Profile Create and manage rogue AP monitoring files that can be associated with different APs. NWA50AX User’s Guide...
Page 37: Cloud Mode Navigation Panel Menus
Da shb o a rd The dashboard displays general Zyxel Device information, and AP information in widgets that you can re-arrange to suit your needs. For details on the Dashboard’s features, see Chapter 23 on page 187. NWA50AX User’s Guide...
Page 38: Tables And Lists
• Sort in ascending alphabetical order • Sort in descending (reverse) alphabetical order • Select which columns to display • Group entries by field • Show entries in groups • Filter by mathematical operators (<, >, or =) or searching for text. NWA50AX User’s Guide...
Page 39 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time. NWA50AX User’s Guide...
Page 40 To turn off an entry, select it and click Ina c tiva te Object Reference Select an entry and click to open a screen that shows which settings use O b je c t Re fe re nc e the entry. NWA50AX User’s Guide...
Page 41: Sta Nda Lo Ne C O Nfig Ura Tio N
A RT Sta nda lo ne C o nfig ura tio n...
Page 42: Standalone Configuration
The Zyxel Re b o o t Re b o o t Device writes all cached data to the local storage, stops the system processes, and then does a warm start. NWA50AX User’s Guide...
Page 43 It does not stop the system processes or write cached data to local storage. The Zyxel Device does not stop or start the system processes when you apply configuration files or run shell scripts although you may temporarily lose access to network resources. NWA50AX User’s Guide...
Page 44: Dashboard
This field displays the location of the Zyxel Device. Click the icon to open the screen where you can change it. Model Name This field displays the model name of this Zyxel Device. Serial Number This field displays the serial number of this Zyxel Device. NWA50AX User’s Guide...
Page 45 This field displays the current date and time in the Zyxel Device. The format is yyyy-mm-dd Time hh:mm:ss. Current Login This field displays the user name used to log in to the current session, the amount of User reauthentication time remaining, and the amount of lease time remaining. NWA50AX User’s Guide...
Page 46 This indicates the wireless frequency band currently being used by the radio. This shows when the radio is in monitor mode. OP Mode This indicates the radio’s operating mode. Operating modes are AP (MBSSID) MO N (monitor), Ro o t AP Re pe a te r NWA50AX User’s Guide...
Page 47: Cpu Usage
The x-axis shows the time period over which the CPU usage occurred. Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA50AX User’s Guide...
Page 48: Memory Usage
The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA50AX User’s Guide...
Page 49: Setup Wizard
O ffse t Enter a number from 1 to 5.5 (by 0.5 increments). Click to proceed. Click to close the wizard without saving. Ne xt C a nc e l NWA50AX User’s Guide...
Page 50: Step 2 Password And Uplink Connection
The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. Click to return to the previous screen. Click to proceed. Click to close the wizard Pre v Ne xt C a nc e l without saving. NWA50AX User’s Guide...
Page 51: Step 3 Radio
Note: Reducing the output power also reduces the Zyxel Device’s effective broadcast radius. Click to return to the previous screen. Click to proceed. Click to close the wizard Pre v Ne xt C a nc e l without saving. Wizard: Radio Fig ure 25 NWA50AX User’s Guide...
Page 52: Step 4 Ssid
Use this screen to check whether what you have configured is correct. Click to apply your settings Sa ve and complete the wizard setup. Otherwise, click to return to the previous screen or click Pre v C a nc e l close the wizard without saving. NWA50AX User’s Guide...
Page 53 Chapter 7 Setup Wizard Wizard: Summary Fig ure 27 NWA50AX User’s Guide...
Page 54: Monitor
Friendly APs are other wireless access points that are detected in your network, as well as any others that you know are not a threat (those from neighboring networks, for example). See Chapter 13 on page 117 for details. NWA50AX User’s Guide...
Page 55: Network Status
DHCP request to a DHCP server. If the interface cannot use one of these ways to get or to update its IP address, this field displays n/ a Port Statistics Table Poll Interval Enter how often you want this window to be updated automatically, and click Se t Inte rva l NWA50AX User’s Guide...
Page 56: Port Statistics Graph
Use the port statistics graph to look at a line graph of packet statistics for the Ethernet port. To view, click and then the button. Mo nito r > Ne two rk Sta tus Switc h to G ra phic Vie w NWA50AX User’s Guide...
Page 57: Radio List
Use this screen to view statistics for the Zyxel Device’s wireless radio transmitters. To access this screen, click Mo nito r > Wire le ss > AP Info rm a tio n > Ra dio L ist NWA50AX User’s Guide...
Page 58 Channel This indicates the radio’s channel ID. Transmit Power This displays the output power of the radio. Station This displays the number of wireless clients connected to this radio on the Zyxel Device. NWA50AX User’s Guide...
Page 59: Ap Mode Radio Information
This screen allows you to view a selected radio’s SSID details, wireless traffic statistics and station count for the preceding 24 hours. To access this window, select a radio and click the button Mo re Info rm a tio n in the screen. Ra dio L ist NWA50AX User’s Guide...
Page 60 This list shows information about all the wireless clients that have connected to the specified radio over the preceding 24 hours. This is the items sequential number in the list. It has no bearing on the actual data in this list. NWA50AX User’s Guide...
Page 61: Station List
This displays the supported standard currently being used by the station or the standards supported by the station. 802.11 Features This displays whether the station supports IEEE802.11r, IEEE 802.11k, IEEE 802.11v or none of the above ( N/ A NWA50AX User’s Guide...
Page 62: Wds Link Info
When the Zyxel Device is in repeater mode and connected to a root AP and other repeater(s), both the uplink and downlink information would be displayed. This is the index number of the root AP or repeater in this list. NWA50AX User’s Guide...
Page 63: Detected Device
If the Zyxel Device does not support monitor mode, turn on rogue AP detection in the screen to detect other APs. C o nfig ura tio n > Wire le ss > Ro g ue AP NWA50AX User’s Guide...
Page 64 Chapter 8 Monitor Monitor > Wireless > Detected Device (for Zyxel Device that supports Monitor mode) Fig ure 35 NWA50AX User’s Guide...
Page 65 This shows how many devices are detected, but have not been classified as either Rogue or Friendly by the Zyxel Device. Detect Now Click this button for the Zyxel Device to scan for APs in the network. Detected Device NWA50AX User’s Guide...
Page 66: View Log
The Web Configurator saves the filter settings once you click . If you leave the screen Se a rc h Vie w L o g and return to it later, the last filter settings would still apply. NWA50AX User’s Guide...
Page 67 De b ug L o g Source Address This displays when you show the filter. Type the source IP address of the incoming packet that generated the log message. Do not include the port in this filter. NWA50AX User’s Guide...
Page 68 This field displays the destination interface of the packet that generated the log message. Interface Protocol This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. NWA50AX User’s Guide...
Page 69: Network
Center (NCC) discovery settings. 9.2 IP Se tting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click C o nfig ura tio n > Ne two rk > IP Se tting NWA50AX User’s Guide...
Page 70 IPv6 address itself from a prefix obtained from an IPv6 router in the network. configuration (SLAAC) Link-Local This displays the IPv6 link-local address and the network prefix that the Zyxel Device Address generates itself for the LAN interface. NWA50AX User’s Guide...
Page 71: Vlan
This section discusses how to configure the Zyxel Device’s VLAN settings. Note: Mis-configuring the management VLAN settings in your Zyxel Device can make it inaccessible. If this happens, you will have to reset the Zyxel Device. Management VLAN Setup Fig ure 40 NWA50AX User’s Guide...
Page 72 Activate/ To turn on an entry, select it and click . To turn off an entry, select it and click Ac tiva te Inactivate Ina c tiva te This is the index number of the port. NWA50AX User’s Guide...
Page 73: Ncc Discovery
You can manage the Zyxel Device through the Zyxel Nebula Control Center (NCC). Use this screen to configure the proxy server settings if the Zyxel Device is behind a proxy server. To access this screen, click > > C o nfig ura tio n Ne two rk NC C Disc o ve ry NWA50AX User’s Guide...
Page 74 User Name Enter your proxy user name. Password Enter your proxy password. Apply Click to save your changes back to the Zyxel Device. Apply Reset Click to return the screen to its last-saved settings. Re se t NWA50AX User’s Guide...
Page 75: Wireless
83) allows you to configure network traffic load L o a d Ba la nc ing balancing between the APs and the Zyxel Device. • The screen (Section 10.4 on page 83) allows you to configure dynamic radio channel selection. DC S NWA50AX User’s Guide...
Page 76: What You Need To Know
10.2 AP Ma na g e m e nt Use this screen to manage the Zyxel Device’s general wireless settings. Click C o nfig ura tio n > Wire le ss > to access this screen. AP Ma na g e m e nt NWA50AX User’s Guide...
Page 77 Each field is described in the following table. Table 28 Configuration > Wireless > AP Management L ABEL DESC RIPT IO N Radio 1 Setting Radio 1 Activate Select the check box to enable the Zyxel Device’s first (default) radio. NWA50AX User’s Guide...
Page 78 This field displays the SSID profile that is associated with the radio profile. Radio 2 Setting Radio 2 Activate This displays if the Zyxel Device has a second radio. Select the check box to enable the Zyxel Device’s second radio. NWA50AX User’s Guide...
Page 79: Rogue Ap
AP list in a txt file. Ro g ue AP De te c tio n Click to access this screen. C o nfig ura tio n > Wire le ss > Ro g ue AP NWA50AX User’s Guide...
Page 80 The APs which you mark as either rogue or friendly APs in the Mo nito r > Wire le ss > screen will appear in the screen. See Section 1.4 on page 18 De te c te d De vic e Wire le ss > Ro g ue AP NWA50AX User’s Guide...
Page 81 Ro g ue AP De te c tio n associated with the Zyxel Device. Configuration > Wireless > Rogue AP (for Zyxel Devices that support Monitor mode) Fig ure 46 NWA50AX User’s Guide...
Page 82 Click this button to add an AP to the list and assign it either friendly or rogue status. Edit Select an AP in the list to edit and reassign its status. Remove Select an AP in the list to remove. This field is a sequential value, and it is not associated with any interface. NWA50AX User’s Guide...
Page 83: Add/Edit Rogue/Friendly List
10.4 DC S Use this screen to configure dynamic radio channel selection (see Dynamic Channel Selection (DCS) on page 76). Click to access this screen. C o nfig ura tio n > Wire le ss > DC S NWA50AX User’s Guide...
Page 84: Technical Reference
In the 2.4 GHz spectrum, each channel from 1 to 13 is broken up into discrete 22 MHz segments that are spaced 5 MHz apart. Channel 1 is centered on 2.412 GHz while channel 13 is centered on 2.472 GHz. An Example Three-Channel Deployment Fig ure 50 NWA50AX User’s Guide...
Page 85 AP, signal strength, activity, and so on. Finally, there is an alternative four channel scheme for ETSI, consisting of channels 1, 5, 9, 13. This offers significantly less overlap that the other one. An Alternative Four-Channel Deployment Fig ure 52 NWA50AX User’s Guide...
Page 86: User
Perform basic diagnostics (CLI) Access Users user Used for the embedded RADIUS server and SNMPv3 user access Browse user-mode commands (CLI) Note: The default account is always authenticated locally, regardless of the a dm in authentication method setting. NWA50AX User’s Guide...
Page 87: User Summary
11.2.1.1 Rule s fo r Use r Na m e s Enter a user name from 1 to 31 characters. The user name can only contain the following characters: • Alphanumeric A-z 0-9 (there is no unicode support) • _ [underscores] NWA50AX User’s Guide...
Page 88 Enter the password of this user account. It can consist of 4 - 63 alphanumeric characters. Retype Re-enter the password to make sure you have entered it correctly. Description Enter the description of each user, if any. You can use up to 60 printable ASCII characters. Default descriptions are provided. NWA50AX User’s Guide...
Page 89: Setting
This screen controls default settings, login settings, lockout settings, and other user settings for the Zyxel Device. To access this screen, login to the Web Configurator, and click C o nfig ura tio n > O b je c t > Use r > Se tting NWA50AX User’s Guide...
Page 90 Zyxel Device in one session before having to log in again. Unlike , the user has no opportunity L e a se T im e to renew the session without logging out. User Logon Settings NWA50AX User’s Guide...
Page 91: Edit User Authentication Timeout Settings
C o nfig ura tio n > O b je c t > Use r > Se tting De fa ult entry and click the icon. Authe ntic a tio n T im e o ut Se tting s Edit User > Setting > Edit User Authentication Timeout Settings Fig ure 56 NWA50AX User’s Guide...
Page 92 L e a se T im e opportunity to renew the session without logging out. Click to save your changes back to the Zyxel Device. Cancel Click to exit this screen without saving your changes. C a nc e l NWA50AX User’s Guide...
Page 93: Ap Profile
The SSID (Service Set IDentifier) is the name that identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. In other words, it is the name of the wireless network that clients use to connect to it. NWA50AX User’s Guide...
Page 94: Radio
Zyxel Device can use to configure its radio transmitter(s). To access this screen click C o nfig ura tio n > O b je c t > AP Pro file Note: You can have a maximum of 32 radio profiles on the Zyxel Device. NWA50AX User’s Guide...
Page 95: Add/Edit Radio Profile
12.2.1 Add/ Edit Ra dio Pro file This screen allows you to create a new radio profile or edit an existing one. To access this screen, click button or select a radio profile from the list and click the button. Edit NWA50AX User’s Guide...
Page 96 Select this option to make this profile active. Profile Name Enter up to 31 alphanumeric characters to be used as this profile’s name. Spaces and underscores are allowed. 802.11 Band Select whether this radio would use the 2.4 GHz or 5 GHz band. NWA50AX User’s Guide...
Page 97 If you disable this then the Zyxel Device switches channels immediately regardless of any client connections. In this instance, clients that are connected to the Zyxel Device when it switches channels are dropped. NWA50AX User’s Guide...
Page 98 If the channel on which it is currently broadcasting suddenly comes into use by another AP, the Zyxel Device will then dynamically select the next available clean channel or a channel with lower interference. NWA50AX User’s Guide...
Page 99 Set a minimum client signal strength. A wireless client is allowed to connect to the AP only Threshold when its signal strength is stronger than the specified threshold. -20 dBm is the strongest signal you can require and -105 is the weakest. NWA50AX User’s Guide...
Page 100: Ssid
12.3 SSID The SSID screens allow you to configure three different types of profiles for your networked APs: an SSID list, which can assign specific SSID configurations to your APs; a security list, which can assign specific NWA50AX User’s Guide...
Page 101: Ssid List
Table 39 Configuration > Object > AP Profile > SSID > SSID List L ABEL DESC RIPT IO N Click this to add a new SSID profile. This button is not available after you configure the Zyxel Deviceusing the wizard. Edit Click this to edit the selected SSID profile. NWA50AX User’s Guide...
Page 102: Add/Edit Ssid Profile
12.3.2 Add/ Edit SSID Pro file This screen allows you to create a new SSID profile or edit an existing one. To access this screen, click the button or select a SSID profile from the list and click the button. Edit NWA50AX User’s Guide...
Page 103 Chapter 12 AP Profile Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (NWA50AX) Fig ure 61 The following table describes the labels in this screen. Table 40 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile...
Page 104 Select this option and set whether the SSID is enabled or disabled on each day of the week. You also need to select the hour and minute (in 24-hour format) to specify the time period of each day during which the SSID is enabled/enabled. NWA50AX User’s Guide...
Page 105: Security List
C o nfig ura tio n > O b je c t > AP Pro file > SSID > Se c urity L ist Note: You can have a maximum of 32 security profiles on the Zyxel Device. Configuration > Object > AP Profile > SSID > Security List (NWA50AX) Fig ure 62 The following table describes the labels in this screen.
Page 106 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Fig ure 63 Mode: none (NWA50AX) The following table describes the labels in this screen. Table 42 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security...
Page 107 Note: Click on the button to show the fields describe below. Sho w Adva nc e d Se tting s Idle Timeout Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. NWA50AX User’s Guide...
Page 108 Cancel Click to exit this screen without saving your changes. C a nc e l Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Fig ure 65 Mode: wep (NWA50AX) NWA50AX User’s Guide...
Page 109 Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. Click to save your changes back to the Zyxel Device. Cancel Click to exit this screen without saving your changes. C a nc e l NWA50AX User’s Guide...
Page 110 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Fig ure 66 Mode: wpa2 (NWA50AX) The following table describes the labels in this screen. Table 45 Configuration > Object > AP Profile > SSID > Security List > AAdd/Edit Security Profile> Security...
Page 111 MFP in order to join the Zyxel Device’s Re q uire d wireless network. Click to save your changes back to the Zyxel Device. Cancel Click to exit this screen without saving your changes. C a nc e l NWA50AX User’s Guide...
Page 112 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Fig ure 67 Mode: wpa2-mix (NWA50AX) The following table describes the labels in this screen. Table 46 Configuration > Object > AP Profile > SSID > Security List > AAdd/Edit Security Profile> Security...
Page 113 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Fig ure 68 Mode: wpa3 (NWA50AX) The following table describes the labels in this screen. Table 47 Configuration > Object > AP Profile > SSID > Security List > AAdd/Edit Security Profile> Security...
Page 114 MFP in order to join the Zyxel Device’s Re q uire d wireless network. Click to save your changes back to the Zyxel Device. Cancel Click to exit this screen without saving your changes. C a nc e l NWA50AX User’s Guide...
Page 115: Mac Filter List
This screen allows you to create a new MAC filtering profile or edit an existing one. To access this screen, click the button or select a MAC filter profile from the list and click the button. Edit Note: Each MAC filtering profile can include a maximum of 512 MAC addresses. NWA50AX User’s Guide...
Page 116 Enter up to 60 characters, spaces and underscores allowed. Click to save your changes back to the Zyxel Device. Cancel Click to exit this screen without saving your changes. C a nc e l NWA50AX User’s Guide...
Page 117: Mon Profile
Remove Click this to remove the selected monitor mode profile. Activate To turn on an entry, select it and click Ac tiva te Inactivate To turn off an entry, select it and click Ina c tiva te NWA50AX User’s Guide...
Page 118: Add/Edit Mon Profile
See Edit Section 1.2.3 on page 14 for more information about MON Mode. Configuration > Object > MON Profile > Add/Edit MON Profile Fig ure 72 NWA50AX User’s Guide...
Page 119 These channels are limited to the 5 GHz range (802.11 a/n/ac/ax). Not all Zyxel Devices support both 2.4 GHz and 5 GHz frequency bands. Click to save your changes back to the Zyxel Device. Cancel Click to exit this screen without saving your changes. C a nc e l NWA50AX User’s Guide...
Page 120: Wds Profile
This field is a sequential value, and it is not associated with a specific profile. Profile Name This field indicates the name assigned to the profile. WDS SSID This field shows the SSID specified in this WDS profile. NWA50AX User’s Guide...
Page 121: Add/Edit Wds Profile
64 hexadecimal characters. The key is used to encrypt the traffic between the APs. Click to save your changes back to the Zyxel Device. Cancel Click to exit this screen without saving your changes. C a nc e l NWA50AX User’s Guide...
Page 122: Certificates
Jenny receives the message and uses Tim’s public key to verify it. Jenny knows that the message is from Tim, and that although other people may have been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim’s private key). NWA50AX User’s Guide...
Page 123 The Zyxel Device currently allows the importation of a PKS#7 file that contains a single certificate. • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. NWA50AX User’s Guide...
Page 124: Verifying A Certificate
Use a secure method to verify that the certificate owner has the same information in the T hum b print fields. The secure method may vary based on your situation. Possible Alg o rithm T hum b print examples would be over the telephone or through an HTTPS connection. NWA50AX User’s Guide...
Page 125: My Certificates
Subject This field displays identifying information about the certificate’s owner, such as CN (Common Name), OU (Organizational Unit or department), O (Organization or company) and C (Country). It is recommended that each certificate have unique subject information. NWA50AX User’s Guide...
Page 126: Add My Certificates
Use this screen to have the Zyxel Device create a self-signed certificate, enroll a C e rtific a te s certificate with a certification authority or generate a certification request. Configuration > Object > Certificate > My Certificates > Add Fig ure 76 NWA50AX User’s Guide...
Page 127 My C e rtific a te Edit locally for later certification authority. manual enrollment Copy the certification request from the screen and then send it to the My C e rtific a te Edit certification authority. NWA50AX User’s Guide...
Page 128: Edit My Certificates
C o nfig ura tio n > O b je c t > C e rtific a te > My C e rtific a te s Edit screen. You can use this screen to view in-depth certificate information and change the C e rtific a te Edit certificate’s name. NWA50AX User’s Guide...
Page 129 Chapter 15 Certificates Configuration > Object > Certificate > My Certificates > Edit Fig ure 77 NWA50AX User’s Guide...
Page 130 This field displays general information about the certificate. For example, Subject Type=CA means that this is a certification authority’s certificate and “Path Length Constraint=1” means that there can only be one certification authority in the certificate’s path. This field does not display for a certification request. NWA50AX User’s Guide...
Page 131: Import Certificates
The certificate you import replaces the corresponding request in the screen. My C e rtific a te s You must remove any spaces in the certificate’s filename before you can import it. NWA50AX User’s Guide...
Page 132: Trusted Certificates
This screen displays a summary list of certificates that you have set the Zyxel Device to accept as trusted. The Zyxel Device also accepts any valid certificate signed by a certificate on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certificates. NWA50AX User’s Guide...
Page 133: Edit Trusted Certificates
T ruste d C e rtific a te s Edit change the certificate’s name and set whether or not you want the Zyxel Device to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification NWA50AX User’s Guide...
Page 134 Chapter 15 Certificates authority. Configuration > Object > Certificate > Trusted Certificates > Edit Fig ure 80 NWA50AX User’s Guide...
Page 135 This field displays the type of algorithm that was used to sign the certificate. Some certification authorities use rsa-pkcs1-sha1 (RSA public-private key encryption algorithm and the SHA1 hash algorithm). Other certification authorities may use rsa-pkcs1-md5 (RSA public-private key encryption algorithm and the MD5 hash algorithm). NWA50AX User’s Guide...
Page 136: Import Trusted Certificates
Follow the instructions in this screen to save a trusted certificate to the Zyxel Device. C e rtific a te s Note: You must remove any spaces from the certificate’s filename before you can import the certificate. NWA50AX User’s Guide...
Page 137: Technical Reference
The second is a reduction in network traffic since the Zyxel Device only gets information on the certificates that it needs to verify, not a huge list. When the Zyxel Device requests certificate status information, the OCSP server returns a “expired”, “current” or “unknown” response. NWA50AX User’s Guide...
Page 138: System
A host name is the unique name by which a device is known on a network. Click C o nfig ura tio n > Syste m to open this screen. > Ho st Na m e Configuration > System > Host Name Fig ure 82 NWA50AX User’s Guide...
Page 139: Date And Time
. The screen displays as shown. You can manually set the Zyxel Device’s time and Syste m > Da te / T im e date or have the Zyxel Device get the date and time from a time server. NWA50AX User’s Guide...
Page 140 The Zyxel Device requests time and date settings from the time server under the following circumstances. • When the Zyxel Device starts up. • When you click in this screen. Apply Sync . No w • 24-hour intervals after starting up. NWA50AX User’s Guide...
Page 141: Pre-Defined Ntp Time Servers List
When you turn on the Zyxel Device for the first time, the date and time start at 2003-01-01 00:00:00. The Zyxel Device then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers. NWA50AX User’s Guide...
Page 142: Time Server Synchronization
To get the Zyxel Device date and time from a time server: Click Syste m > Da te / T im e Select under G e t fro m T im e Se rve r T im e a nd Da te Se tup NWA50AX User’s Guide...
Page 143: Www Overview
HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot read the NWA50AX User’s Guide...
Page 144: Configuring Www Service Control
16.4.4 C o nfig uring WWW Se rvic e C o ntro l Click to open the screen. Use this screen to specify HTTP or HTTPS C o nfig ura tio n > Syste m > WWW settings. NWA50AX User’s Guide...
Page 145: Https Example
If you have not changed the default HTTPS port on the Zyxel Device, then in your browser enter “https:// Zyxel Device IP Address/” as the web site address where “Zyxel Device IP Address” is the IP address or domain name of the Zyxel Device you wish to access. NWA50AX User’s Guide...
Page 146 L e a rn Mo re ... Zyxel Device. Click > Adva nc e d Ac c e pt the Risk a nd C o ntinue NWA50AX User’s Guide...
Page 147 C e rtific a te s Apply for a certificate from a Certification Authority (CA) that is trusted by the Zyxel Device (see the Zyxel Device’s Web Configurator screen). T ruste d C e rtific a te s NWA50AX User’s Guide...
Page 148 Ne xt The file name and path of the certificate you double-clicked should automatically appear in the File text box. Click if you wish to import a different certificate. na m e Bro wse NWA50AX User’s Guide...
Page 149 Have the wizard determine where the certificate should be saved on your computer or select Pla c e a ll and choose a different location. c e rtific a te s in the fo llo wing sto re NWA50AX User’s Guide...
Page 150 You should see the following screen when the certificate is correctly installed on your computer. 16.4.5.6 Using a C e rtific a te Whe n Ac c e ssing the Zyxe l De vic e To access the Zyxel Device via HTTPS: NWA50AX User’s Guide...
Page 151: Ssh
In the following figure, computer B on the Internet uses SSH to securely connect to the Zyxel Device (A) for a management session. SSH Communication Over the WAN Example Fig ure 91 NWA50AX User’s Guide...
Page 152: How Ssh Works
After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server. The client then sends its authentication information (user name and password) to the server to log in to the server. NWA50AX User’s Guide...
Page 153: Ssh Implementation On The Zyxel Device
SSH connections. You must have certificates already configured in the My C e rtific a te s screen. Apply Click to save your changes back to the Zyxel Device. Apply Reset Click to return the screen to its last-saved settings. Re se t NWA50AX User’s Guide...
Page 154: Examples Of Secure Telnet Using Ssh
Enter “telnet 192.168.1.2 22” at a terminal prompt and press [ENTER]. The computer attempts to connect to port 22 on the Zyxel Device (using the default IP address of 192.168.1.2). A message displays indicating the SSH protocol version supported by the Zyxel Device. NWA50AX User’s Guide...
Page 155: Ftp
To change your Zyxel Device’s FTP settings, click tab. The screen appears C o nfig ura tio n > Syste m > FT P as shown. Use this screen to specify FTP settings. Configuration > System > FTP Fig ure 97 NWA50AX User’s Guide...
Page 156 FTP connections. You must have certificates already configured in the My C e rtific a te s screen. Apply Click to save your changes back to the Zyxel Device. Apply Reset Click to return the screen to its last-saved settings. Re se t NWA50AX User’s Guide...
Page 157: Log And Report
Sum m a ry 17.2.1 L o g Se tting Sc re e n To access this screen, click C o nfig ura tio n > L o g & Re po rt > L o g Se tting NWA50AX User’s Guide...
Page 158 Vie w L o g - Zyxel’s Vantage Report, syslog-compatible format. VRPT / Syslo g - Common Event Format, syslog-compatible format. C EF/ Syslo g Summary This field is a summary of the settings for each log. NWA50AX User’s Guide...
Page 159: Edit System Log Settings
17.2.2 Edit Syste m L o g Se tting s This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the screen and click the icon. L o g Se tting Edit NWA50AX User’s Guide...
Page 160 Chapter 17 Log and Report Configuration > Log & Report > Log Setting > Edit System Log Setting Fig ure 99 NWA50AX User’s Guide...
Page 161 The Zyxel Device does not e-mail debugging information, even if this setting is selected. NWA50AX User’s Guide...
Page 162 Me ssa g e field. Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA50AX User’s Guide...
Page 163: Edit Remote Server
This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in screen and click the icon. L o g Se tting Edit Configuration > Log & Report > Log Setting > Edit Remote Server Fig ure 100 NWA50AX User’s Guide...
Page 164: Active Log Summary
To access this screen, go to the L o g screen, and click the button. Se tting Ac tive L o g Sum m a ry NWA50AX User’s Guide...
Page 165 The Zyxel Device does not e-mail debugging information, even if this setting is selected. NWA50AX User’s Guide...
Page 166 Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA50AX User’s Guide...
Page 167: File Manager
# enter configuration mode configure terminal # change administrator password username admin password 4321 user-type admin #configure default radio profile, change 2GHz channel to 11 & Tx output power # to 50% wlan-radio-profile default 2g-channel 11 output-power 50% exit write NWA50AX User’s Guide...
Page 168: Configuration File
C o nfig ura tio n File screen to store, run, and name configuration files. You can also download configuration files from the Zyxel Device to your computer and upload configuration files from your computer to the Zyxel Device. NWA50AX User’s Guide...
Page 169 Maintenance > File Manager > Configuration File Fig ure 103 Do no t turn o ff the Zyxe l De vic e while c o nfig ura tio n file uplo a d is in pro g re ss. NWA50AX User’s Guide...
Page 170 Specify a name for the duplicate configuration file. Use up to 25 characters (including a-zA-Z0- 9;‘~!@#$%^&()_+[]{}’,.=-). Click to save the duplicate or click to close the screen without saving a duplicate of C a nc e l the configuration file. NWA50AX User’s Guide...
Page 171 Zyxel Device last restarted. If you upload and apply a configuration file with an error, you can apply lastgood.conf to return to a valid configuration. Size This column displays the size (in KB) of a configuration file. NWA50AX User’s Guide...
Page 172: Example Of Configuration File Download Using Ftp
Use “dir” or “ls” if you need to display a list of the files in the directory. Use "get” to download files. Transfer the configuration file on the Zyxel Device to your computer. Type get followed by the name of the configuration file. This examples uses get startup-config.conf. NWA50AX User’s Guide...
Page 173: Firmware Package
T he firm wa re upda te c a n ta ke up to five m inute s. Do no t turn o ff o r re se t the Zyxe l De vic e while the firm wa re upda te is in pro g re ss! NWA50AX User’s Guide...
Page 174: Example Of Firmware Upload Using Ftp
Connect your computer to the Zyxel Device. The FTP server IP address of the Zyxel Device in standalone mode is 192.168.1.2, so set your computer to use a static IP address from 192.168.1.3 ~192.168.1.254. NWA50AX User’s Guide...
Page 175: Shell Script
Note: You should include write commands in your scripts. If you do not use the write command, the changes will be lost when the Zyxel Device restarts. You could use multiple write commands in a long script. NWA50AX User’s Guide...
Page 176 The bottom part of the screen allows you to upload a new or previously saved shell script file from Script your computer to your Zyxel Device. File Path Type in the location of the file you want to upload in this field or click to find it. Bro wse ... NWA50AX User’s Guide...
Page 177 L ABEL DESC RIPT IO N Browse... Click to find the .zysh file you want to upload. Bro wse ... Upload Click to begin the upload process. This process may take up to several minutes. Uplo a d NWA50AX User’s Guide...
Page 178: Diagnostics
De b ug Info rm a tio n C e nte r successful, or has failed. When the data collection is done, click to save the most recent Do wnlo a d diagnostic file to a computer. NWA50AX User’s Guide...
Page 179: Remote Capture
Zyxel Device. The default port number is 2002. Start Click this button to allow the packet analyzer to start capturing traffic going through the Zyxel Device. Stop Click this button to stop the packet analyzer from capturing traffic going through the Zyxel Device. NWA50AX User’s Guide...
Page 180: Leds
Note: When the ZyXEL Device is booting or performing firmware upgrade, the LEDs will light up regardless of the setting in LED suppression. To access this screen, click > > Ma inte na nc e L EDs Suppre ssio n NWA50AX User’s Guide...
Page 181: Locator Screen
If you make changes to the time default setting, it will be stored as the default when the Zyxel Device restarts. Note: The Locator feature is not affected by the Suppression setting. To access this screen, click > > Ma inte na nc e L EDs L o c a to r NWA50AX User’s Guide...
Page 182 Enter a time interval between 1 and 60 minutes to stop the locator LED from blinking. After Default is 10 minutes. Apply Click to save changes in this screen. Apply Refresh Click to update the information in this screen. Re fre sh NWA50AX User’s Guide...
Page 183: Reboot
Zyxel Device. Wait a few minutes until the login screen appears. If Re b o o t the login screen does not appear, type the IP address of the Zyxel Device in your Web browser. You can also use the CLI command reboot to restart the Zyxel Device. NWA50AX User’s Guide...
Page 184: Shutdown
Zyxel Device. Wait for the Zyxel Device to shut down before Shutdo wn you manually turn off or remove the power. It does not turn off the power. You can also use the CLI command shutdown to shut down the Zyxel Device. NWA50AX User’s Guide...
Page 185: L O C A L C O Nfig Ura Tio N In C Lo Ud Mo De
A RT L o c a l C o nfig ura tio n in C lo ud Mo de...
Page 186: Cloud Mode
Web Configurator: • Da shb o a rd • C o nfig ura tio n > Ne two rk > IP Se tting • C o nfig ura tio n > Ne two rk > VL AN NWA50AX User’s Guide...
Page 187: Dashboard
Zyxel Device is connected. Internet This field displays whether the Zyxel Device is connecting to the Internet. Nebula This field displays whether the Zyxel Device can connect to the Zyxel Nebula Control Center Connectivity (NCC). Status NWA50AX User’s Guide...
Page 188 This displays whether the NAP uses a proxy server to access the NCC (Nebula Control Access NCC Center). If the Zyxel Device cannot connect to the Internet or to NCC, an error message is shown on this screen, as in the following. NWA50AX User’s Guide...
Page 189: Network
VL AN 24.2 IP Se tting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click C o nfig ura tio n > Ne two rk > IP Se tting NWA50AX User’s Guide...
Page 190 User Name Enter your proxy user name. Password Enter your proxy password. Apply Click to save your changes back to the Zyxel Device. Apply Reset Click to return the screen to its last-saved settings. Re se t NWA50AX User’s Guide...
Page 191: Vlan
Set whether the Zyxel Device adds the VLAN ID to outbound traffic transmitted through its Tagged Ethernet port. Apply Click to save your changes back to the Zyxel Device. Apply Reset Click to return the screen to its last-saved settings. Re se t NWA50AX User’s Guide...
Page 192: Maintenance
Ma inte na nc e > She ll Sc ript She ll Sc ript download, and upload shell script files. You can store multiple shell script files on the Zyxel Device at the same time. Maintenance > Shell Script Fig ure 118 NWA50AX User’s Guide...
Page 193: Diagnostics
Click to have the Zyxel Ma inte na nc e > Dia g no stic s Dia g no stic s C o lle c t No w Device create a new diagnostic file. NWA50AX User’s Guide...
Page 194: View Log
Events that generate an alert (as well as a log message) display in red. Regular logs display in black. Click a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order. NWA50AX User’s Guide...
Page 195 63 alphanumeric characters and the underscore, as well as punctuation marks ()’ ,:;?! +-*/= #$% @ ; the period, double quotes, and brackets are not allowed. Search This displays when you show the filter. Click this button to update the log using the current filter settings. NWA50AX User’s Guide...
Page 196 This field displays the destination interface of the packet that generated the log message. Interface Protocol This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. NWA50AX User’s Guide...
Page 197: Appe Ndic E S A Nd T Ro Ub Le Sho O Ting
A RT Appe ndic e s a nd T ro ub le sho o ting...
Page 198: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 3.1 on page Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. NWA50AX User’s Guide...
Page 199: Zyxel Device Management, Access, And Login
• If there is no DHCP server on your network, make sure your computer’s IP address is in the same subnet as the Zyxel Device. Reset the Zyxel Device to its factory defaults, and try to access the Zyxel Device with the default IP address. See Section 26.6 on page 205. NWA50AX User’s Guide...
Page 200 I cannot access the Zyxel Device directly anymore after switching to NCC management. • Check the Zyxel Device IP address and login credentials using the NCC and use them to access the Zyxel Device. Note that the built-in Web Configurator will have limited functionality when managed through NCC. NWA50AX User’s Guide...
Page 201 After changing your Zyxel Device settings using the NCC, wait 1-2 minutes for the changes to take effect. I can only see newer logs. Older logs are missing. When a log reaches the maximum number of log messages (see Section 1.4 on page 18), new log messages automatically overwrite the oldest log messages. NWA50AX User’s Guide...
Page 202: Internet Access
Disconnect all the cables from your Zyxel Device, and follow the directions in the Quick Start Guide again. Reboot the client and reconnect to the Zyxel Device. If the problem continues, contact your ISP. The Internet connection is slow or intermittent. NWA50AX User’s Guide...
Page 203: Wifi Network
It is strongly recommended that you use a more effective security mechanism. Use the strongest security mechanism that all the wireless devices in your network support. WPA2 or WPA2-PSK is recommended. The wireless security is not following the re-authentication timer setting I specified. NWA50AX User’s Guide...
Page 204 Mo nito r > Wire le ss > AP Info rm a tio n > Ra dio L ist associated with any Zyxel Devices assigned to the load balancing task. • Check that the AP profile which contains the load balancing settings is correctly assigned to the Zyxel Devices in question. NWA50AX User’s Guide...
Page 205: Resetting The Zyxel Device
You should be able to access the Zyxel Device in standalone mode using the default settings. 26.7 G e tting Mo re T ro ub le sho o ting He lp Search for support information for your model at www.zyxel.com for more troubleshooting suggestions. NWA50AX User’s Guide...
Page 206: Appendix A Importing Certificates
G o o g le C hro m e The following example uses Google Chrome on Windows 7. You first have to store the certificate in your computer and then install it as a Trusted Root CA, as shown in the following tutorials. NWA50AX User’s Guide...
Page 207 Appendix A Importing Certificates Expo rt a C e rtific a te If your device’s Web Configurator is set to use SSL certification, then upon browsing with it for the first time, you are presented with a certification error. NWA50AX User’s Guide...
Page 208 Click Adva nc e d > Pro c e e d to (unsa fe ) x.x.x.x In the , click > Addre ss Ba r No t Se c ure C e rtific a te (Inva lid) NWA50AX User’s Guide...
Page 209 Appendix A Importing Certificates In the dialog box, click C e rtific a te De ta ils > C o py to File In the , click C e rtific a te Expo rt Wiza rd Ne xt NWA50AX User’s Guide...
Page 210 Appendix A Importing Certificates Select the format and settings you want to use and then click Ne xt Type a filename and specify a folder to save the certificate in. Click Ne xt NWA50AX User’s Guide...
Page 211 Im po rt a C e rtific a te After storing the certificate in your computer (see Export a Certificate), you need to install it as a trusted root certification authority using the following steps: NWA50AX User’s Guide...
Page 212 Appendix A Importing Certificates Open your web browser, click the menu icon, and click Se tting s NWA50AX User’s Guide...
Page 213 Appendix A Importing Certificates Scroll down and click to expand the menu. Under , click Adva nc e d Priva c y a nd se c urity Ma na g e c e rtific a te s NWA50AX User’s Guide...
Page 214 T ruste d Ro o t C e rtific a tio n Autho ritie s Im po rt C e rtific a te Im po rt Wiza rd Click when the wizard pops up, and then on the following screen click Ne xt Bro wse NWA50AX User’s Guide...
Page 215 Appendix A Importing Certificates Select the certificate file you want to import and click O pe n Click Ne xt. NWA50AX User’s Guide...
Page 216 Appendix A Importing Certificates Confirm the settings displayed and click Finish If presented with a security warning, click Ye s NWA50AX User’s Guide...
Page 217 Rather than installing a public key certificate using web browser settings, you can install a stand-alone certificate file if one has been issued to you. Double-click the public key certificate file. Click Insta ll C e rtific a te NWA50AX User’s Guide...
Page 218 Pla c e a ll c e rtific a te s in the fo llo wing sto re Bro wse Select > , and then click T ruste d Ro o t C e rtific a te Autho ritie s Ne xt NWA50AX User’s Guide...
Page 219 Appendix A Importing Certificates Confirm the information shown on the final wizard screen and click Finish If presented with a security warning, click Ye s NWA50AX User’s Guide...
Page 220 Re m o ve a C e rtific a te in G o o g le C hro m e This section shows you how to remove a public key certificate in Google Chrome on Windows 7. Open your web browser, click the menu icon, and click Se tting s NWA50AX User’s Guide...
Page 221 Priva c y a nd se c urity Ma na g e c e rtific a te s In the Certificates pop-up screen, click T ruste d Ro o t C e rtific a tio n Autho ritie s NWA50AX User’s Guide...
Page 222 Fire fo x The following example uses Mozilla Firefox on Windows 7. You first have to store the certificate in your computer and then install it as a Trusted Root CA, as shown in the following tutorials. NWA50AX User’s Guide...
Page 223 If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Adva nc e d Click Vie w C e rtific a te . NWA50AX User’s Guide...
Page 224 Type a filename and click Sa ve Im po rt a C e rtific a te After storing the certificate in your computer, you need to import it in trusted root certification authorities using the following steps: NWA50AX User’s Guide...
Page 225 Appendix A Importing Certificates Open and click Fire fo x T o o ls > O ptio ns NWA50AX User’s Guide...
Page 226 O ptio ns Priva c y & Se c urity Vie w C e rtific a te s In the , click > C e rtific a te Ma na g e r Autho ritie s Im po rt NWA50AX User’s Guide...
Page 227 T rust this C A to ide ntify we b site s Re m o ving a C e rtific a te in Fire fo x This section shows you how to remove a public key certificate in Firefox. NWA50AX User’s Guide...
Page 228 T o o ls > O ptio ns In the page, click , scroll to the bottom of the page, and then click O ptio ns Priva c y & Se c urity Vie w C e rtific a te s NWA50AX User’s Guide...
Page 229 Autho ritie s De le te o r Distrust In the following dialog box, click The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA50AX User’s Guide...
Page 230: Appendix B Ipv6
G lo b a l Addre ss A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. NWA50AX User’s Guide...
Page 231 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 85 Reserved Multicast Address MUL T IC AST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 NWA50AX User’s Guide...
Page 232 DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP. In IPv6, all network interfaces can be associated with several addresses. NWA50AX User’s Guide...
Page 233 2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the Zyxel Device passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. NWA50AX User’s Guide...
Page 234 Group Management Protocol version 2 (IGMPv2). MLD uses ICMPv6 message types, rather than IGMP message types. MLDv1 is equivalent to IGMPv2 and MLDv2 is equivalent to IGMPv3. MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive NWA50AX User’s Guide...
Page 235 DHCPv6 client software on your Windows XP. (Note: If you use static IP addresses or Router Advertisement for IPv6 address assignment in your network, ignore this section.) This example uses Dibbler as the DHCPv6 client. To enable DHCPv6 client on your computer: NWA50AX User’s Guide...
Page 236 Exa m ple - Ena b ling IPv6 o n Windo ws 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: NWA50AX User’s Guide...
Page 237 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 NWA50AX User’s Guide...
Page 238: Appendix C Customer Support
C o rpo ra te He a dq ua rte rs (Wo rldwide ) T a iwa n • Zyxel Communications Corporation • http://www.zyxel.com Asia C hina • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • https://www.zyxel.com/cn/zh/ India • Zyxel Technology India Pvt Ltd •...
Page 239 • Zyxel Communications Corporation • https://www.zyxel.com/tw/zh/ T ha ila nd • Zyxel Thailand Co., Ltd • https://www.zyxel.com/th/th/ Vie tna m • Zyxel Communications Corporation-Vietnam Office • https://www.zyxel.com/vn/vi Euro pe Be la rus • Zyxel BY • https://www.zyxel.by Be lg ium •...
Page 240 Appendix C Customer Support • https://www.zyxel.com/be/fr/ Bulg a ria • Zyxel България • https://www.zyxel.com/bg/bg/ C ze c h Re pub lic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ De nm a rk • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Esto nia •...
Page 241 Ro m a nia • Zyxel Romania • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slo va kia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spa in • Zyxel Communications ES Ltd • https://www.zyxel.com/es/es/ Swe de n • Zyxel Communications •...
Page 242 Appendix C Customer Support T urke y • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr/ • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en/ Ukra ine • Zyxel Ukraine • http://www.ua.zyxel.com So uth Am e ric a Arg e ntina • Zyxel Communications Corporation •...
Page 243 Appendix C Customer Support Middle Ea st • Zyxel Communications Corporation • https://www.zyxel.com/me/en/ No rth Am e ric a • Zyxel Communications, Inc. - North America Headquarters • https://www.zyxel.com/us/en/ O c e a nia Austra lia • Zyxel Communications Corporation •...
Page 244: Appendix D Legal Information
The following applies if you use the product within Brazil. interferência prejudicial, mesmo de estações do mesmo Este equipamento opera em caráter secundário, isto é, não tem direito a proteção contra tipo, e não pode causar interferência a sistemas operando em caráter primário. NWA50AX User’s Guide...
Page 245 If this device for operation in the band 5150-5350 MHz, it is for indoor use only. • This equipment should be installed and operated with a minimum distance of 20 cm between the radio equipment and your body. • The maximum RF power operating for each band as follows: NWA50AX User’s Guide...
Page 246 Hierbij verklaart Zyxel dat het toestel uitrusting in overeenstemming is met de essentiële eisen en de andere relevante (Dutch) bepalingen van richtlijn 2014/53/EU. Niniejszym Zyxel oświadcza, że sprzęt jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Polski (Polish) Dyrektywy 2014/53/EU. NWA50AX User’s Guide...
Page 247 AC in North America or 230V AC in Europe). If the power adaptor or cord is damaged, it might cause electrocution. Remove it from the device and the power source, repairing the power adapter or cord is prohibited. Contact your local vendor to order a new one. NWA50AX User’s Guide...
Page 248 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. NWA50AX User’s Guide...
Page 249 Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. NWA50AX User’s Guide...
Page 250 O pe n So urc e L ic e nse s This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. To request the source code covered under these licenses, please go to: https://www.zyxel.com/form/gpl_oss_software_notice.shtml NWA50AX User’s Guide...
Page 251: Inde X
Basic Service Set 127, 128 certification requests see BSS certifications Bluetooth viewing BLE, see Bluetooth Low Energy channel Bluetooth Low Energy 27, 35 boot module button NWA50AX User’s Guide...
Page 252 Transport Layer Security (TLS) customer support Guide date CLI Reference daylight savings DHCP and domain name 178, 193 diagnostics HTTP disclaimer over SSL, see HTTPS domain name redirect to HTTPS NWA50AX User’s Guide...
Page 253 Management, NCC stateless autoconfiguration Management, Standalone unspecified address managing the device good habits using FTP, see FTP MBSSID 45, 48 memory usage Java messages permissions JavaScripts mode, default model name NWA50AX User’s Guide...
Page 254 42, 183 Simple Certificate Enrollment Protocol (SCEP) reboot vs reset and certificates Reference Guide, CLI client requirements registration encryption methods product for secure Telnet remote management how connection is established FTP, see FTP versions WWW, see WWW NWA50AX User’s Guide...
Page 255 158, 164 VRPT (Vantage Report) Transport Layer Security (TLS) 178, 193 troubleshooting Trusted Certificates, see also certificates warm start warranty note upgrading firmware 26, 30 Web Configurator uploading access configuration files requirements firmware supported browsers NWA50AX User’s Guide...
Page 256 LAN wireless network example overview wireless profile layer-2 isolation MAC filtering radio security SSID 16, 203 wireless security wireless station Wizard Setup WLAN interface WPA2 and certificates see also HTTP, HTTPS ZON Utility Zyxel Discovery Protocol NWA50AX User’s Guide...

ZyXEL Communications NWA50AX User Manual

Pa Rt I: Sta Nda lo Ne C O Nfig Ura Tio N

Pa Rt II: L O C a L C O Nfig Ura Tio N in C lo Ud Mo de

Pa Rt III: Appe Ndic E S a Nd T Ro Ub Le Sho O Ting

Appendix A Importing Certificates

Appendix B Ipv6

Appendix C Customer Support

Appendix D Legal Information

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications NWA50AX

Summary of Contents for ZyXEL Communications NWA50AX

Table of Contents