Page 1 WAC6502D-E / WAC6502D-S / WAC6503D-S / WAC6553D-E / WAC6103D-I 802.11 a/b/g/n/ac Unified Access Point Version 4.21 Edition 2, 10/2015 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.2 User Name admin www.zyxel.com Password 1234 Copyright © 2015 ZyXEL Communications Corporation...
Page 2 • Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information. • More Information Go to support.zyxel.com to find other information on the NWA/WAC. NWA5000 / WAC6000 Series User’s Guide...
Page 3: Table Of Contents
AP Profile ..............................87 MON Profile ............................106 WDS Profile ............................110 Certificates ............................112 System ..............................129 Log and Report .............................154 File Manager ............................167 Diagnostics ............................178 LEDs ..............................180 Antenna Switch .............................183 Reboot ..............................185 Shutdown ..............................186 Troubleshooting ............................187 NWA5000 / WAC6000 Series User’s Guide...
Page 4: Table Of Contents
Chapter 2 The Web Configurator ........................28 2.1 Overview ............................28 2.2 Access ...............................28 2.3 Navigating the Web Configurator ......................29 2.3.1 Title Bar ...........................30 2.3.2 Navigation Panel ........................33 2.3.3 Warning Messages ........................36 2.3.4 Tables and Lists ........................36 NWA5000 / WAC6000 Series User’s Guide...
Page 5 6.1.1 What You Can Do in this Chapter ....................68 6.1.2 What You Need to Know ......................69 6.2 AP Management ..........................69 6.3 MON Mode ............................72 6.3.1 Add/Edit Rogue/Friendly List ....................74 6.4 Load Balancing ..........................74 6.4.1 Disassociating and Delaying Connections ................76 6.5 DCS ..............................77 NWA5000 / WAC6000 Series User’s Guide...
Page 6 9.3 Technical Reference ........................108 Chapter 10 WDS Profile ............................110 10.1 Overview ............................110 10.1.1 What You Can Do in this Chapter ..................110 10.2 WDS Profile ........................... 110 10.2.1 Add/Edit WDS Profile ......................111 NWA5000 / WAC6000 Series User’s Guide...
Page 7 12.5.5 Examples of Secure Telnet Using SSH ................146 12.6 Telnet ............................148 12.7 FTP ..............................148 12.8 SNMP ............................149 12.8.1 Supported MIBs ........................150 12.8.2 SNMP Traps ........................151 12.8.3 Configuring SNMP .......................151 12.8.4 Adding or Editing an SNMPv3 User Profile .................152 NWA5000 / WAC6000 Series User’s Guide...
Page 8 16.1.1 What You Can Do in this Chapter ..................180 16.2 Suppression Screen ........................180 16.3 Locator Screen ..........................181 Chapter 17 Antenna Switch..........................183 17.1 Overview ............................183 17.1.1 What You Need To Know .....................183 17.2 Antenna Switch Screen .........................183 Chapter 18 Reboot ...............................185 NWA5000 / WAC6000 Series User’s Guide...
Page 9 20.5 Wireless Connections ........................191 20.6 Resetting the NWA/WAC ......................194 20.7 Getting More Troubleshooting Help ....................194 Appendix A Importing Certificates ....................195 Appendix B IPv6 ..........................208 Appendix C Customer Support ......................217 Appendix D Legal Information ......................223 Index ..............................232 NWA5000 / WAC6000 Series User’s Guide...
Page 10: User's Guide
User’s Guide...
Page 11: Introduction
IEEE 802.11n IEEE 802.11ac IEEE 802.11ac IEEE 802.11ac IEEE 802.11ac IEEE 802.11ac Supported Frequency Bands 2.4 GHz 2.4 GHz 2.4 GHz 2.4 GHz 2.4 GHz 5 GHz 5 GHz 5 GHz 5 GHz 5 GHz NWA5000 / WAC6000 Series User’s Guide...
Page 12: Management Mode
If the NWA/WAC and a ZyXEL AP controller, such as the NXC2500 or NXC5500, are in the same subnet, it will be managed by the controller automatically. An AP controller uses Control And Provisioning of Wireless Access Points (CAPWAP, see RFC 5415) to discover and configure multiple managed APs. NWA5000 / WAC6000 Series User’s Guide...
Page 13: Mbssid
SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for guest users. In this example, the guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet. NWA5000 / WAC6000 Series User’s Guide...
Page 14: Dual-Radio
Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming. NWA5000 / WAC6000 Series User’s Guide...
Page 15: Root Ap
Figure 3 Root AP Application On the NWA/WAC in Root AP mode, you can have multiple SSIDs active for regular wireless connections and one SSID for the connection with a repeater (repeater SSID). Wireless clients can NWA5000 / WAC6000 Series User’s Guide...
Page 16: Repeater
APs and repeaters must use the same pre-shared key. See Section 6.2 on page 69 Section 10.2 on page 110 for more details. Once the security settings of peer sides match one another, the connection between devices is made. NWA5000 / WAC6000 Series User’s Guide...
Page 17: Ways To Manage The Nwa/Wac
NWA/WAC; you can simply restore your last configuration. 1.4 Hardware Connections See your Quick Start Guide for information on making hardware connections. NWA5000 / WAC6000 Series User’s Guide...
Page 18: Nwa5301-Nj Hardware
Table 4 Color Codes for 110 Punch Down Block Wiring PIN# WIRE COLOR White/Orange Orange White/Green Blue White/Blue Green White/Brown Brown Use a punch-down tool to seat the wires down properly into the slot. NWA5000 / WAC6000 Series User’s Guide...
Page 19: Phone Port
NOT for making calls over the regular networking network (PSTN), either. 1.5.3 Console Port To use the CLI commands to configure the NWA, connect an RJ-45-to-DB-9 cable to the PHONE port at the bottom of the NWA. NWA5000 / WAC6000 Series User’s Guide...
Page 20: Leds
LEDs stay lit (ON) or OFF after the device is ready. The WAC6500 also features Locator LED which allows you to see the actual location of the WAC6500 between several devices in the network. Following are LED descriptions for the NWA/WAC series models. NWA5000 / WAC6000 Series User’s Guide...
Page 21: Wac6502D-E, Wac6502D-S, Wac6503D-S And Wac6553D-E
Slow Blinking (blink The Uplink port is disconnected. for 3 times, Off for 3s) Green Slow Blinking (blink The wireless module of the WAC is disabled or failed. for 2 times, Off for 3s) Green NWA5000 / WAC6000 Series User’s Guide...
Page 22: Wac6103D-I
WAC between several devices in the network. The Locator function is off. 1.6.2 WAC6103D-I The LEDs will stay ON when the WAC6103D-I is ready. You can change this setting in the Maintenance > LEDs > Suppression screen. NWA5000 / WAC6000 Series User’s Guide...
Page 23 2 times, Off for 3s) Green Management Green The WAC is managed by a controller. Slow Blinking (blink The WAC is searching (discovery) for a controller. for 3 times, Off for 3s) The WAC is in standalone mode. NWA5000 / WAC6000 Series User’s Guide...
Page 24: Nwa5301-Nj
The LEDs automatically turn off when the NWA5301-NJ is ready. You can press the LED ON button for one second to turn on the LEDs again. The LEDs will blink and turn off after two minutes. NWA5000 / WAC6000 Series User’s Guide...
Page 25 Blinking The NWA is sending/receiving data through the port. The port is not connected. LAN1-3 Green The port is connected. Blinking The NWA is sending/receiving data through the port. The port is not connected. NWA5000 / WAC6000 Series User’s Guide...
Page 26: Nwa5121-N, Nwa5121-Ni, Nwa5123-Ac And Nwa5123-Ni
3 times, Off for 3s) Green Amber The NWA failed to boot up or is experience system failure. Green Amber Fast Blinking (On for The NWA is undergoing firmware upgrade. 50ms, Off for 50ms) Green NWA5000 / WAC6000 Series User’s Guide...
Page 27: Starting And Stopping The Nwa/Wac
It does not stop the system processes or write cached data to local storage. The NWA/WAC does not stop or start the system processes when you apply configuration files or run shell scripts although you may temporarily lose access to network resources. NWA5000 / WAC6000 Series User’s Guide...
Page 28: The Web Configurator
Section 1.1.1 on page 12) and hardware is properly connected. See the Quick Start Guide. Make sure your computer’s IP address is in the range between "192.168.1.3" and "192.168.1.254". Browse to http://192.168.1.2. The Login screen appears. NWA5000 / WAC6000 Series User’s Guide...
Page 29: Navigating The Web Configurator
2.3 Navigating the Web Configurator The following summarizes how to navigate the web configurator from the Dashboard screen. This guide uses the WAC6103D-I screens as an example. The screens may vary slightly for different models. NWA5000 / WAC6000 Series User’s Guide...
Page 30: Title Bar
Click this to open a screen where you can check which configuration items reference an Reference object. Click this to open a popup window that displays the CLI commands sent by the Web Configurator. NWA5000 / WAC6000 Series User’s Guide...
Page 31 This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. Click this to close the screen. Site Map Click Site MAP to see an overview of links to the Web Configurator screens. Click a screen’s link to go to that screen. NWA5000 / WAC6000 Series User’s Guide...
Page 32 Object Reference Click Object Reference to open the Object Reference screen. Select the type of object and the individual object and click Refresh to show which configuration settings reference the object. Figure 13 Object Reference NWA5000 / WAC6000 Series User’s Guide...
Page 33: Navigation Panel
The following sections introduce the NWA/WAC’s navigation panel menus and their screens. NWA5000 / WAC6000 Series User’s Guide...
Page 34 Table 15 Configuration Menu Screens Summary FOLDER OR LINK FUNCTION Network IP Setting Configure the IP address for the NWA/WAC Ethernet interface. VLAN Manage the Ethernet interface VLAN settings. AC Discovery Configures the NWA/WAC’s AP Controller settings. NWA5000 / WAC6000 Series User’s Guide...
Page 35 Manage and upload configuration files for the NWA/WAC. Firmware Package View the current firmware version and to upload firmware. Shell Script Manage and run shell script files for the NWA/WAC. Diagnostics Diagnostics Collect diagnostic information. NWA5000 / WAC6000 Series User’s Guide...
Page 36: Warning Messages
The options available vary depending on the type of fields in the column. Here are some examples of what you can do: • Sort in ascending alphabetical order • Sort in descending (reverse) alphabetical order NWA5000 / WAC6000 Series User’s Guide...
Page 37 Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. NWA5000 / WAC6000 Series User’s Guide...
Page 38 In some lists you can also use the [Shift] or [Ctrl] key to select multiple entries, and then use the arrow button to move them to the other list. NWA5000 / WAC6000 Series User’s Guide...
Page 39 Chapter 2 The Web Configurator Figure 17 Working with Lists NWA5000 / WAC6000 Series User’s Guide...
Page 40: Technical Reference
Technical Reference...
Page 41: Dashboard
Dashboard icon in the navigation panel. The Dashboard displays general device information, system status, system resource usage, and interface status in widgets that you can re- arrange to suit your needs. You can also collapse, refresh, and close individual widgets. NWA5000 / WAC6000 Series User’s Guide...
Page 42 Click the icon to open the screen where you can upload firmware. Last Firmware This field displays whether the latest firmware update was successfully completed. Upgrade Status Last Firmware This field displays the date and time when the last firmware update was made. Upgrade Timestamp NWA5000 / WAC6000 Series User’s Guide...
Page 43 This field displays the current date and time in the NWA/WAC. The format is yyyy-mm- Time dd hh:mm:ss. Current Login This field displays the user name used to log in to the current session, the amount of User reauthentication time remaining, and the amount of lease time remaining. NWA5000 / WAC6000 Series User’s Guide...
Page 44 IP Assignment This field displays how the interface gets its IP address. Static - This interface has a static IP address. DHCP Client - This interface gets its IP address from a DHCP server. NWA5000 / WAC6000 Series User’s Guide...
Page 45: Cpu Usage
This displays the number of detected friendly APs. 3.2.1 CPU Usage Use this screen to look at a chart of the NWA/WAC’s recent CPU usage. To access this screen, click CPU Usage in the dashboard. Figure 19 Dashboard > CPU Usage NWA5000 / WAC6000 Series User’s Guide...
Page 46: Memory Usage
The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA5000 / WAC6000 Series User’s Guide...
Page 47: Monitor
Friendly APs are other wireless access points that are detected in your network, as well as any others that you know are not a threat (those from neighboring networks, for example). See Chapter 9 on page 106 for details. NWA5000 / WAC6000 Series User’s Guide...
Page 48: Network Status
Click this to set the Poll Interval the screen uses. Stop Click this to stop the window from updating automatically. You can start it again by setting the Poll Interval and clicking Set Interval. Name This field displays the name of the interface. NWA5000 / WAC6000 Series User’s Guide...
Page 49: Radio List
DESCRIPTION More Click this to view additional information about the selected radio’s wireless traffic and Information station count. Information spans a 24 hour period. Status This displays whether or not the radio is enabled. NWA5000 / WAC6000 Series User’s Guide...
Page 50: Ap Mode Radio Information
This screen allows you to view a selected radio’s SSID details, wireless traffic statistics and station count for the preceding 24 hours. To access this window, select a radio and click the More Information button in the Radio List screen. NWA5000 / WAC6000 Series User’s Guide...
Page 51 Chapter 4 Monitor Figure 23 Monitor > Wireless > AP Information > Radio List > More Information NWA5000 / WAC6000 Series User’s Guide...
Page 52: Station List
4.5 Station List Use this screen to view statistics pertaining to the associated stations (or “wireless clients”). Click Monitor > Wireless > Station Info to access this screen. Figure 24 Monitor > Wireless > Station Info NWA5000 / WAC6000 Series User’s Guide...
Page 53: Wds Link Info
Use this screen to view the WDS traffic statistics between the NWA/WAC and a root AP or repeaters. Click Monitor > Wireless > WDS Link Info to access this screen. Figure 25 Monitor > Wireless > WDS Link Info NWA5000 / WAC6000 Series User’s Guide...
Page 54: Detected Device
Note: The radio or at least one of the NWA/WAC’s radio must be set to monitor mode (in the Wireless > AP Management screen) in order to detect other wireless devices in its vicinity. NWA5000 / WAC6000 Series User’s Guide...
Page 55: View Log
In the regular log, you can look at all the log messages by selecting All Logs, or you can select a specific category of log messages (for example, user). You can also look at the debugging log by selecting Debug Log. All debugging messages have the same priority. NWA5000 / WAC6000 Series User’s Guide...
Page 56 Events that generate an alert (as well as a log message) display in red. Regular logs display in black. Click a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order. Figure 27 Monitor > Log > View Log NWA5000 / WAC6000 Series User’s Guide...
Page 57 This field displays the source interface of the packet that generated the log message. Destination This field displays the destination IP address and the port number of the event that generated the log message. NWA5000 / WAC6000 Series User’s Guide...
Page 58 This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. The Web Configurator saves the filter settings if you leave the View Log screen and return to it later. NWA5000 / WAC6000 Series User’s Guide...
Page 59: Network
The CAPWAP dataflow is protected by Datagram Transport Layer Security (DTLS). The following figure illustrates a CAPWAP wireless network. You (U) configure the AP controller (C), which then automatically updates the configurations of the managed APs (M1 ~ M4). NWA5000 / WAC6000 Series User’s Guide...
Page 60 • Broadcasting to discover the controller within the broadcast domain. Note: The AP controller needs to have a static IP address. If it is a DHCP client, set the DHCP server to reserve an IP address for the AP controller. NWA5000 / WAC6000 Series User’s Guide...
Page 61: What You Can Do In This Chapter
62) configures the NWA/WAC’s LAN IP address. • The VLAN screen (Section 5.3 on page 63) configures the NWA/WAC’s VLAN settings. • The AC (AP Controller) Discovery screen (Section 5.3 on page 63) configures the NWA/WAC’s AP Controller settings. NWA5000 / WAC6000 Series User’s Guide...
Page 62: Ip Setting
Enter the IP address of the gateway. The NWA/WAC sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the interface. NWA5000 / WAC6000 Series User’s Guide...
Page 63: Vlan
Apply Click Apply to save your changes back to the NWA/WAC. Reset Click Reset to return the screen to its last-saved settings. 5.3 VLAN This section discusses how to configure the NWA/WAC’s VLAN settings. NWA5000 / WAC6000 Series User’s Guide...
Page 64 The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. Use this screen to configure the VLAN settings for your NWA/WAC. To access this screen, click Configuration > Network > VLAN. NWA5000 / WAC6000 Series User’s Guide...
Page 65 (features where the NWA/WAC applies the table’s entries in order like the SSID for example), you can select an entry and click Add to create a new entry after the selected entry. NWA5000 / WAC6000 Series User’s Guide...
Page 66: Ac (Ap Controller) Discovery
NWA/WAC. You can get the configuration file at conf/system-default.conf. You must reboot the device after uploading the configuration file. To access the Controller Discover screen, click Configuration > Network > AC Discovery. NWA5000 / WAC6000 Series User’s Guide...
Page 67 NWA/WAC and you cannot log in as the web configurator is disabled; you must manage the NWA/WAC through the AP controller on your network. Reset Click Reset to return the screen to its last-saved settings. NWA5000 / WAC6000 Series User’s Guide...
Page 68: Wireless
• The Load Balancing screen (Section 6.4 on page 74) configures network traffic load balancing between the APs and the NWA/WAC. • The DCS screen (Section 6.5 on page 77) configures dynamic radio channel selection. NWA5000 / WAC6000 Series User’s Guide...
Page 69: What You Need To Know
(AP) or you limit the amount of wireless traffic transmitted and received on it so the AP does not become overloaded. 6.2 AP Management Use this screen to manage the NWA/WAC’s general wireless settings. Click Configuration > Wireless > AP Management to access this screen. NWA5000 / WAC6000 Series User’s Guide...
Page 70 Each field is described in the following table. Table 32 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the check box to enable the NWA/WAC’s first (default) radio. NWA5000 / WAC6000 Series User’s Guide...
Page 71 This field displays the SSID profile that is associated with the radio profile. Radio 2 Setting Radio 2 Activate This displays if the NWA/WAC has a second radio. Select the check box to enable the NWA/WAC’s second radio. NWA5000 / WAC6000 Series User’s Guide...
Page 72: Mon Mode
Use this screen to assign APs either to the rogue AP list or the friendly AP list. A rogue AP is a wireless access point operating in a network’s coverage area that is not under the control of the network administrator, and which can potentially open up holes in a network’s security. NWA5000 / WAC6000 Series User’s Guide...
Page 73 Click this button to export the current list of either rogue APs or friendly APS. Apply Click Apply to save your changes back to the NWA/WAC. Reset Click Reset to return the screen to its last-saved settings. NWA5000 / WAC6000 Series User’s Guide...
Page 74: Add/Edit Rogue/Friendly List
Use this screen to configure wireless network traffic load balancing between the APs on your network. Click Configuration > Wireless > Load Balancing to access this screen. Figure 39 Configuration > Wireless > Load Balancing NWA5000 / WAC6000 Series User’s Guide...
Page 75 AP will be disassociated permanently and never be allowed to connect. Apply Click Apply to save your changes back to the NWA/WAC. Reset Click Reset to return the screen to its last-saved settings. NWA5000 / WAC6000 Series User’s Guide...
Page 76: Disassociating And Delaying Connections
If no connections are idle, the next criteria the NWA/WAC analyzes is signal strength. Devices with the weakest signal strength are kicked first. NWA5000 / WAC6000 Series User’s Guide...
Page 77: Dcs
In the 2.4 GHz spectrum, each channel from 1 to 13 is broken up into discrete 22 MHz segments that are spaced 5 MHz apart. Channel 1 is centered on 2.412 GHz while channel 13 is centered on 2.472 GHz. NWA5000 / WAC6000 Series User’s Guide...
Page 78 Rather than let every user connect and subsequently dilute the available bandwidth to the point where each connecting device receives a meager trickle, the load balanced AP instead limits the incoming connections as a means to maintain bandwidth integrity. NWA5000 / WAC6000 Series User’s Guide...
Page 79 AP has the bandwidth to spare. If too many people connect and the AP hits its bandwidth cap then all new connections must basically wait for their turn or get shunted to the nearest identical AP. NWA5000 / WAC6000 Series User’s Guide...
Page 80: User
Perform basic diagnostics (CLI) Access Users user Used for the embedded RADIUS server and SNMPv3 user access Browse user-mode commands (CLI) Note: The default admin account is always authenticated locally, regardless of the authentication method setting. NWA5000 / WAC6000 Series User’s Guide...
Page 81: User Summary
The User Add/Edit screen allows you to create a new user account or edit an existing one. 7.2.1.1 Rules for User Names Enter a user name from 1 to 31 characters. The user name can only contain the following characters: NWA5000 / WAC6000 Series User’s Guide...
Page 82 • sshd • sync • uucp • zyxel To access this screen, go to the User screen, and click Add or Edit. Figure 47 Configuration > Object > User > Add/Edit A User NWA5000 / WAC6000 Series User’s Guide...
Page 83: Setting
This screen controls default settings, login settings, lockout settings, and other user settings for the NWA/WAC. To access this screen, login to the Web Configurator, and click Configuration > Object > User > Setting. NWA5000 / WAC6000 Series User’s Guide...
Page 84 Admin users renew the session every time the main screen refreshes in the Web Configurator. NWA5000 / WAC6000 Series User’s Guide...
Page 85: Edit User Authentication Timeout Settings
To access this screen, go to the Configuration > Object > User > Setting screen, select one of the Default Authentication Timeout Settings entry and click the Edit icon. Figure 49 User > Setting > Edit User Authentication Timeout Settings NWA5000 / WAC6000 Series User’s Guide...
Page 86 You can enter 0 to make the number of minutes unlimited. Unlike Lease Time, the user has no opportunity to renew the session without logging out. Click OK to save your changes back to the NWA/WAC. Cancel Click Cancel to exit this screen without saving your changes. NWA5000 / WAC6000 Series User’s Guide...
Page 87: Ap Profile
Wireless stations associating to the access point (AP) must have the same SSID. In other words, it is the name of the wireless network that clients use to connect to it. NWA5000 / WAC6000 Series User’s Guide...
Page 88: Radio
Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile. Activate To turn on an entry, select it and click Activate. NWA5000 / WAC6000 Series User’s Guide...
Page 89: Add/Edit Radio Profile
This screen allows you to create a new radio profile or edit an existing one. To access this screen, click the Add button or select a radio profile from the list and click the Edit button. NWA5000 / WAC6000 Series User’s Guide...
Page 90 Click this to hide or show the Advanced Settings in this window. Advanced Settings General Settings Activate Select this option to make this profile active. Profile Name Enter up to 31 alphanumeric characters to be used as this profile’s name. Spaces and underscores are allowed. NWA5000 / WAC6000 Series User’s Guide...
Page 91 3 or 4 channels. Select manual to select the individual channels the NWA/WAC switches between. Select channels from the Available channels list and use the right arrow button to move them to the Channels selected list. NWA5000 / WAC6000 Series User’s Guide...
Page 92 This specifies the time period before the device sends the beacon again. The interval tells receiving devices on the network how long they can wait in low-power mode before waking up to handle the beacon. A high value helps save current consumption of the access point. NWA5000 / WAC6000 Series User’s Guide...
Page 93: Ssid
This screen allows you to create and manage SSID configurations that can be used by the APs. An SSID, or Service Set IDentifier, is basically the name of the wireless network to which a wireless NWA5000 / WAC6000 Series User’s Guide...
Page 94: Add/Edit Ssid Profile
This screen allows you to create a new SSID profile or edit an existing one. To access this screen, click the Add button or select a SSID profile from the list and click the Edit button. NWA5000 / WAC6000 Series User’s Guide...
Page 95 Layer-2 isolation allows you to prevent wireless clients associated with your NWA/WAC from communicating with other wireless clients, APs, computers or routers in a network. The disable setting means no layer-2 isolation is used. NWA5000 / WAC6000 Series User’s Guide...
Page 96: Security List
To access this screen click Configuration > Object > AP Profile > SSID > Security List. Note: You can have a maximum of 32 security profiles on the NWA/WAC. NWA5000 / WAC6000 Series User’s Guide...
Page 97: Add/Edit Security Profile
Add button or select a security profile from the list and click the Edit button. Note: This screen’s options change based on the Security Mode selected. Only the default screen is displayed here. NWA5000 / WAC6000 Series User’s Guide...
Page 98 Chapter 8 AP Profile Figure 55 SSID > Security Profile > Add/Edit Security Profile NWA5000 / WAC6000 Series User’s Guide...
Page 99 Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. Authentication Type Select a WEP authentication method. Choices are Open or Share key. Share key is only available if you are not using 802.1x. NWA5000 / WAC6000 Series User’s Guide...
Page 100 Select Required and wireless clients must support MFP in order to join the NWA/WAC’s wireless network. Click OK to save your changes back to the NWA/WAC. Cancel Click Cancel to exit this screen without saving your changes. NWA5000 / WAC6000 Series User’s Guide...
Page 101: Mac Filter List
This screen allows you to create a new MAC filtering profile or edit an existing one. To access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of 512 MAC addresses. NWA5000 / WAC6000 Series User’s Guide...
Page 102: Layer-2 Isolation List
Click Cancel to exit this screen without saving your changes. 8.6 Layer-2 Isolation List Layer-2 isolation is used to prevent wireless clients associated with your NWA/WAC from communicating with other wireless clients, APs, computers or routers in a network. NWA5000 / WAC6000 Series User’s Guide...
Page 103 Table 50 Configuration > Object > AP Profile > SSID > Layer-2 Isolation List LABEL DESCRIPTION Click this to add a new MAC filtering profile. Edit Click this to edit the selected MAC filtering profile. Remove Click this to remove the selected MAC filtering profile. NWA5000 / WAC6000 Series User’s Guide...
Page 104: Add/Edit Layer-2 Isolation Profile
This field is a sequential value, and it is not associated with a specific user. This field specifies a MAC address associated with this profile. You can click the MAC address to make it editable. NWA5000 / WAC6000 Series User’s Guide...
Page 105 Enter up to 60 characters, spaces and underscores allowed. Click OK to save your changes back to the NWA/WAC. Cancel Click Cancel to exit this screen without saving your changes. NWA5000 / WAC6000 Series User’s Guide...
Page 106: Mon Profile
Table 52 Configuration > Object > MON Profile LABEL DESCRIPTION Click this to add a new monitor mode profile. Edit Click this to edit the selected monitor mode profile. Remove Click this to remove the selected monitor mode profile. NWA5000 / WAC6000 Series User’s Guide...
Page 107: Add/Edit Mon Profile
This screen allows you to create a new monitor mode profile or edit an existing one. To access this screen, click the Add button or select and existing monitor mode profile and click the Edit button. Figure 62 Configuration > Object > MON Profile > Add/Edit MON Profile NWA5000 / WAC6000 Series User’s Guide...
Page 108: Technical Reference
AP’s weaker (or non-existent) security to gain access to the network, or set up their own rogue APs in order to capture information from wireless clients. If a scan reveals a rogue AP, you can use commercially-available software to physically locate it. NWA5000 / WAC6000 Series User’s Guide...
Page 109 (those from recognized networks, for example). It is recommended that you export (save) your list of friendly APs often, especially if you have a network with a large number of access points. NWA5000 / WAC6000 Series User’s Guide...
Page 110: Wds Profile
This field is a sequential value, and it is not associated with a specific profile. Profile Name This field indicates the name assigned to the profile. WDS SSID This field shows the SSID specified in this WDS profile. NWA5000 / WAC6000 Series User’s Guide...
Page 111: Add/Edit Wds Profile
64 hexadecimal characters. The key is used to encrypt the traffic between the APs. Click OK to save your changes back to the NWA/WAC. Cancel Click Cancel to exit this screen without saving your changes. NWA5000 / WAC6000 Series User’s Guide...
Page 112: Certificates
Jenny receives the message and uses Tim’s public key to verify it. Jenny knows that the message is from Tim, and that although other people may have been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim’s private key). NWA5000 / WAC6000 Series User’s Guide...
Page 113 The NWA/WAC currently allows the importation of a PKS#7 file that contains a single certificate. • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. NWA5000 / WAC6000 Series User’s Guide...
Page 114: Verifying A Certificate
Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation. Possible examples would be over the telephone or through an HTTPS connection. NWA5000 / WAC6000 Series User’s Guide...
Page 115: My Certificates
Use the My Certificate Import screen to import the certificate and replace the request. SELF represents a self-signed certificate. CERT represents a certificate issued by a certification authority. NWA5000 / WAC6000 Series User’s Guide...
Page 116: Add My Certificates
Click Configuration > Object > Certificate > My Certificates and then the Add icon to open the Add My Certificates screen. Use this screen to have the NWA/WAC create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request. NWA5000 / WAC6000 Series User’s Guide...
Page 117 Chapter 11 Certificates Figure 67 Configuration > Object > Certificate > My Certificates > Add NWA5000 / WAC6000 Series User’s Guide...
Page 118 My Certificate Edit screen to view the certification request and copy it to send to locally for later the certification authority. manual enrollment Copy the certification request from the My Certificate Edit screen and then send it to the certification authority. NWA5000 / WAC6000 Series User’s Guide...
Page 119 Add My Certificates screen. Click Return and check your information in the Add My Certificates screen. Make sure that the certification authority information is correct and that your Internet connection is working properly if you want the NWA/WAC to enroll a certificate online. NWA5000 / WAC6000 Series User’s Guide...
Page 120: Edit My Certificates
Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open the My Certificate Edit screen. You can use this screen to view in-depth certificate information and change the certificate’s name. Figure 68 Configuration > Object > Certificate > My Certificates > Edit NWA5000 / WAC6000 Series User’s Guide...
Page 121 “DigitalSignature” means that the key can be used to sign certificates and “KeyEncipherment” means that the key can be used to encrypt text. Extended Key This field displays for what EKU (Extended Key Usage) functions the certificate’s key can Usage be used. NWA5000 / WAC6000 Series User’s Guide...
Page 122: Import Certificates
The certificate you import replaces the corresponding request in the My Certificates screen. You must remove any spaces in the certificate’s filename before you can import it. NWA5000 / WAC6000 Series User’s Guide...
Page 123: Trusted Certificates
WAC to accept as trusted. The NWA/WAC also accepts any valid certificate signed by a certificate on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certificates. NWA5000 / WAC6000 Series User’s Guide...
Page 124 Click Import to open a screen where you can save the certificate of a certification authority that you trust, from your computer to the NWA/WAC. Refresh Click this button to display the current validity status of the certificates. NWA5000 / WAC6000 Series User’s Guide...
Page 125: Edit Trusted Certificates
NWA/WAC to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. Figure 71 Configuration > Object > Certificate > Trusted Certificates > Edit NWA5000 / WAC6000 Series User’s Guide...
Page 126 This field displays identifying information about the certificate’s issuing certification authority, such as Common Name, Organizational Unit, Organization and Country. With self-signed certificates, this is the same information as in the Subject Name field. NWA5000 / WAC6000 Series User’s Guide...
Page 127: Import Trusted Certificates
Import Trusted Certificates screen. Follow the instructions in this screen to save a trusted certificate to the NWA/WAC. Note: You must remove any spaces from the certificate’s filename before you can import the certificate. NWA5000 / WAC6000 Series User’s Guide...
Page 128: Technical Reference
The second is a reduction in network traffic since the NWA/WAC only gets information on the certificates that it needs to verify, not a huge list. When the NWA/WAC requests certificate status information, the OCSP server returns a “expired”, “current” or “unknown” response. NWA5000 / WAC6000 Series User’s Guide...
Page 129: System
A host name is the unique name by which a device is known on a network. Click Configuration > System > Host Name to open this screen. Figure 73 Configuration > System > Host Name NWA5000 / WAC6000 Series User’s Guide...
Page 130: Date And Time
System > Date/Time. The screen displays as shown. You can manually set the NWA/WAC’s time and date or have the NWA/WAC get the date and time from a time server. Figure 74 Configuration > System > Date/Time NWA5000 / WAC6000 Series User’s Guide...
Page 131 Sunday, March. The time you type in the at field depends on your time zone. In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). NWA5000 / WAC6000 Series User’s Guide...
Page 132: Pre-Defined Ntp Time Servers List
Click the Sync. Now button to get the time and date from the time server you specified in the Time Server Address field. When the Loading message appears, you may have to wait up to one minute. Figure 75 Loading NWA5000 / WAC6000 Series User’s Guide...
Page 133: Www Overview
12.4 WWW Overview The following figure shows secure and insecure management of the NWA/WAC coming in from the WAN. HTTPS and SSH access are secure. HTTP, Telnet, and FTP management access are not secure. NWA5000 / WAC6000 Series User’s Guide...
Page 134: Service Access Limitations
NWA/WAC), whereas the HTTPS client only should authenticate itself when the HTTPS server requires it to do so (select Authenticate Client Certificates in the WWW screen). Authenticate Client Certificates is optional and if selected means the HTTPS client must send the NWA/WAC a NWA5000 / WAC6000 Series User’s Guide...
Page 135: Configuring Www Service Control
12.4.4 Configuring WWW Service Control Click Configuration > System > WWW to open the WWW screen. Use this screen to specify HTTP or HTTPS settings. Figure 78 Configuration > System > WWW > Service Control NWA5000 / WAC6000 Series User’s Guide...
Page 136: Https Example
NWA/WAC you wish to access. 12.4.5.1 Internet Explorer Warning Messages When you attempt to access the NWA/WAC HTTPS server, you will see the error message shown in the following screen. NWA5000 / WAC6000 Series User’s Guide...
Page 137 Click Technical Details if you want to verify more information about the certificate from the NWA/WAC. Select I Understand the Risks and then click Add Exception to add the NWA/WAC to the security exception list. Click Confirm Security Exception. NWA5000 / WAC6000 Series User’s Guide...
Page 138 • The issuing certificate authority of the NWA/WAC’s HTTPS server certificate is not one of the browser’s trusted certificate authorities. The issuing certificate authority of the NWA/WAC's factory default certificate is the NWA/WAC itself since the certificate is a self-signed certificate. NWA5000 / WAC6000 Series User’s Guide...
Page 139 Apply for a certificate from a Certification Authority (CA) that is trusted by the NWA/WAC (see the NWA/WAC’s Trusted Certificates Web Configurator screen). Figure 82 Trusted Certificates The CA sends you a package containing the CA’s trusted certificate(s), your personal certificate(s) and a password to install the personal certificate(s). NWA5000 / WAC6000 Series User’s Guide...
Page 140 You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment. Double-click the personal certificate given to you by the CA to produce a screen similar to the one shown next NWA5000 / WAC6000 Series User’s Guide...
Page 141 Click Next to begin the wizard. The file name and path of the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA5000 / WAC6000 Series User’s Guide...
Page 142 Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA5000 / WAC6000 Series User’s Guide...
Page 143 You should see the following screen when the certificate is correctly installed on your computer. 12.4.5.7 Using a Certificate When Accessing the NWA/WAC To access the NWA/WAC via HTTPS: Enter ‘https://NWA/WAC IP Address/ in your browser’s web address field. NWA5000 / WAC6000 Series User’s Guide...
Page 144: Ssh
Figure 83 SSH Communication Over the WAN Example 12.5.1 How SSH Works The following figure is an example of how a secure connection is established between two remote hosts using SSH v1. NWA5000 / WAC6000 Series User’s Guide...
Page 145: Ssh Implementation On The Nwa/Wac
Your NWA/WAC supports SSH versions 1 and 2 using RSA authentication and four encryption methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the NWA/WAC for management using port 22 (by default). NWA5000 / WAC6000 Series User’s Guide...
Page 146: Requirements For Using Ssh
This section shows two examples using a command interface and a graphical interface SSH client program to remotely access the NWA/WAC. The configuration and connection steps are similar for most SSH client programs. Refer to your SSH client program user’s guide. NWA5000 / WAC6000 Series User’s Guide...
Page 147 SSH version 1. If this is the first time you are connecting to the NWA/WAC using SSH, a message displays prompting you to save the host information of the NWA/WAC. Type “yes” and press [ENTER]. Then enter the password to log in to the NWA/WAC. NWA5000 / WAC6000 Series User’s Guide...
Page 148: Telnet
Chapter 14 on page 167 for more information about firmware and configuration files. To change your NWA/WAC’s FTP settings, click Configuration > System > FTP tab. The screen appears as shown. Use this screen to specify FTP settings. NWA5000 / WAC6000 Series User’s Guide...
Page 149: Snmp
Your NWA/WAC supports SNMP agent functionality, which allows a manager station to manage and monitor the NWA/WAC through the network. The NWA/WAC supports SNMP version one (SNMPv1), version two (SNMPv2c), and version three (SNMPv3). The next figure illustrates an SNMP management operation. NWA5000 / WAC6000 Series User’s Guide...
Page 150: Supported Mibs
• Trap - Used by the agent to inform the manager of some events. 12.8.1 Supported MIBs The NWA/WAC supports MIB II that is defined in RFC-1213 and RFC-1215. The NWA/WAC also supports private MIBs (ZYXEL-ES-CAPWAP.MIB, ZYXEL-ES-COMMON.MIB, ZYXEL-ES- ZyXELAPMgmt.MIB, ZYXEL-ES-PROWLAN.MIB, ZYXEL-ES-RFMGMT.MIB, ZYXEL-ES-SMI.MIB, and NWA5000 / WAC6000 Series User’s Guide...
Page 151: Snmp Traps
To change your NWA/WAC’s SNMP settings, click Configuration > System > SNMP tab. The screen appears as shown. Use this screen to configure your SNMP settings. You can also configure user profiles that define allowed SNMPv3 access. Figure 92 Configuration > System > SNMP NWA5000 / WAC6000 Series User’s Guide...
Page 152: Adding Or Editing An Snmpv3 User Profile
This screen allows you to add or edit an SNMPv3 user profile. To access this screen, click the Configuration > System > SNMP screen’s Add button or select a SNMPv3 user profile from the list and click the Edit button. NWA5000 / WAC6000 Series User’s Guide...
Page 153 Select whether the SNMPv3 user can have read-only or read and write access to the NWA/ WAC using this SNMPv3 user profile. Click OK to save your changes back to the NWA/WAC. Cancel Click Cancel to exit this screen without saving your changes. NWA5000 / WAC6000 Series User’s Guide...
Page 154: Log And Report
Note: Data collection may decrease the NWA/WAC’s traffic throughput rate. Click Configuration > Log & Report > Email Daily Report to display the following screen. Configure this screen to have the NWA/WAC e-mail you system statistics every day. NWA5000 / WAC6000 Series User’s Guide...
Page 155 Chapter 13 Log and Report Figure 94 Configuration > Log & Report > Email Daily Report NWA5000 / WAC6000 Series User’s Guide...
Page 156: Log Setting
The NWA/WAC provides a system log and supports e-mail profiles and remote syslog servers. The system log is available on the View Log screen, the e-mail profiles are used to mail log messages to the specified destinations, and the other four logs are stored on specified syslog servers. NWA5000 / WAC6000 Series User’s Guide...
Page 157: Log Setting
Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings. Activate To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate. NWA5000 / WAC6000 Series User’s Guide...
Page 158: Edit System Log Settings
13.3.2 Edit System Log Settings This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. NWA5000 / WAC6000 Series User’s Guide...
Page 159 You specify what kinds of log messages are included in log information and what kinds of log messages are included in alerts in the Active Log and Alert section. Mail Server Type the name or IP address of the outgoing SMTP server. NWA5000 / WAC6000 Series User’s Guide...
Page 160 1 settings. enable normal logs (green check mark) - e-mail log messages for all categories to e-mail server 1. enable alert logs (red exclamation point) - e-mail alerts for all categories to e-mail server 1. NWA5000 / WAC6000 Series User’s Guide...
Page 161: Edit Remote Server
Click this to return to the previous screen without saving your changes. 13.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. NWA5000 / WAC6000 Series User’s Guide...
Page 162 Chapter 13 Log and Report Figure 97 Configuration > Log & Report > Log Setting > Edit Remote Server NWA5000 / WAC6000 Series User’s Guide...
Page 163: Active Log Summary
It does not let you change other log settings (for example, where and how often log information is e-mailed or remote server names). To access this screen, go to the Log Setting screen, and click the Active Log Summary button. NWA5000 / WAC6000 Series User’s Guide...
Page 164 Figure 98 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) NWA5000 / WAC6000 Series User’s Guide...
Page 165 (yellow check mark) - create log messages, alerts, and debugging information from this category; the NWA/WAC does not e-mail debugging information, however, even if this setting is selected. NWA5000 / WAC6000 Series User’s Guide...
Page 166 (yellow check mark) - log regular information, alerts, and debugging information from this category Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA5000 / WAC6000 Series User’s Guide...
Page 167: File Manager
When you apply a configuration file, the NWA/WAC uses the factory default settings for any features that the configuration file does not include. When you run a shell script, the NWA/WAC only applies the commands that it contains. Other settings do not change. NWA5000 / WAC6000 Series User’s Guide...
Page 168 In the following example lines 1 and 2 are comments. Line 7 exits sub command mode. ! this is from Joe # on 2010/12/05 wlan-ssid-profile default ssid Joe-AP qos wmm security default NWA5000 / WAC6000 Series User’s Guide...
Page 169: Configuration File
• You can change the way the startup-config.conf file is applied. Include the setenv-startup stop-on-error off command. The NWA/WAC ignores any errors in the startup-config.conf file and applies all of the valid commands. The NWA/WAC still generates a log for any errors. NWA5000 / WAC6000 Series User’s Guide...
Page 170 OK to delete the configuration file or click Cancel to close the screen without deleting the configuration file. Download Click a configuration file’s row to select it and click Download to save the configuration to your computer. NWA5000 / WAC6000 Series User’s Guide...
Page 171 NWA/WAC with a fully valid configuration file. Click OK to have the NWA/WAC start applying the configuration file or click Cancel to close the screen NWA5000 / WAC6000 Series User’s Guide...
Page 172: Example Of Configuration File Download Using Ftp
Use an FTP client on your computer to connect to the NWA/WAC. For example, in the Windows command prompt, type ftp 192.168.1.2. Keep the console session connected in order to see when the firmware recovery finishes. Enter your user name when prompted. Enter your password as requested. NWA5000 / WAC6000 Series User’s Guide...
Page 173: Firmware Package
See the CLI Reference Guide for how to determine if you need to recover the firmware and how to recover it. Find the firmware package at www.zyxel.com in a file that (usually) uses a .bin extension. NWA5000 / WAC6000 Series User’s Guide...
Page 174 The NWA/WAC automatically restarts causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 102 Network Temporarily Disconnected After five minutes, log in again and check your new firmware version in the Dashboard screen. NWA5000 / WAC6000 Series User’s Guide...
Page 175: Example Of Firmware Upload Using Ftp
10 Enter “quit” to exit the ftp prompt. 14.4 Shell Script Use shell script files to have the NWA/WAC use commands that you specify. Use a text editor to create the shell script files. They must use a “.zysh” filename extension. NWA5000 / WAC6000 Series User’s Guide...
Page 176 Click a shell script file’s row to select it and click Run to have the NWA/WAC use that shell script file. You may need to wait awhile for the NWA/WAC to finish applying the commands. NWA5000 / WAC6000 Series User’s Guide...
Page 177 Type in the location of the file you want to upload in this field or click Browse... to find it. Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA5000 / WAC6000 Series User’s Guide...
Page 178: Diagnostics
This screen provides an easy way for you to generate a file containing the NWA/WAC’s configuration and diagnostic information. You may need to generate this file and send it to customer support during troubleshooting. Click Maintenance > Diagnostics to open the Diagnostic screen. NWA5000 / WAC6000 Series User’s Guide...
Page 179 You can upload a new shell script file using the Maintenance > File Manager > Shell Script screen. Collect Now Click this to have the NWA/WAC create a new diagnostic file. Download Click this to save the most recent diagnostic file to a computer. NWA5000 / WAC6000 Series User’s Guide...
Page 180: Leds
Note: When the , the LEDs will lit NWA/WAC is booting or performing firmware upgrade regardless of the setting in LED suppression. To access this screen, click Maintenance > LEDs > Suppression. NWA5000 / WAC6000 Series User’s Guide...
Page 181: Locator Screen
If you make changes to the time default setting, it will be stored as the defualt when the WAC restarts. Note: The Locator feature is not affected by the Suppression setting. To access this screen, click Maintenance > LEDs > Locator. NWA5000 / WAC6000 Series User’s Guide...
Page 182 Enter a time interval between 1 and 60 minutes to stop the locator LED from After blinking. Default is 10 minutes. Apply Click Apply to save changes in this screen. Refresh Click Refresh to update the information in this screen. NWA5000 / WAC6000 Series User’s Guide...
Page 183: Antenna Switch
Note: The antenna switch in the web configurator has priority over the physical antenna switch after you Enable Software Control in the Maintenance > Antenna screen. By default, software control is disabled. 17.2 Antenna Switch Screen To access this screen, click Maintenance > Antenna. NWA5000 / WAC6000 Series User’s Guide...
Page 184 Select Wall if you mount the NWA/WAC to a wall. Select Ceiling if the the NWA/WAC is mounted on a ceiling. You can switch from Wall to Ceiling if there are still wireless dead zones, and vice versa. NWA5000 / WAC6000 Series User’s Guide...
Page 185: Reboot
Click the Reboot button to restart the NWA/WAC. Wait a few minutes until the login screen appears. If the login screen does not appear, type the IP address of the device in your Web browser. You can also use the CLI command reboot to restart the NWA/WAC. NWA5000 / WAC6000 Series User’s Guide...
Page 186: Shutdown
Click the Shutdown button to shut down the NWA/WAC. Wait for the device to shut down before you manually turn off or remove the power. It does not turn off the power. You can also use the CLI command shutdown to shutdown the NWA/WAC. NWA5000 / WAC6000 Series User’s Guide...
Page 187: Troubleshooting
If none of these steps work, you may have faulty hardware and should contact your NWA/WAC vendor. The LED does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 1.6 on page Check the hardware connections. See the Quick Start Guide. NWA5000 / WAC6000 Series User’s Guide...
Page 188: Nwa/Wac Access And Login
• If there is no DHCP server on your network, make sure your computer’s IP address is in the same subnet as the NWA/WAC. Reset the device to its factory defaults, and try to access the NWA/WAC with the default IP address. Section 20.6 on page 194. NWA5000 / WAC6000 Series User’s Guide...
Page 189: Internet Access
I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. 20.4 Internet Access I cannot access the Internet. NWA5000 / WAC6000 Series User’s Guide...
Page 190 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. NWA5000 / WAC6000 Series User’s Guide...
Page 191: Wireless Connections
You must remove any spaces from the certificate’s filename before you can import the certificate. Any certificate that you want to import has to be in one of these file formats: NWA5000 / WAC6000 Series User’s Guide...
Page 192 See the CLI Reference Guide for how to determine if you need to recover the firmware and how to recover it. Wireless clients are not being load balanced among my APs. NWA5000 / WAC6000 Series User’s Guide...
Page 193 • Find the down arrow close to the Ethernet ports, then use a thin flat tool (for example, a flat screw driver) to lift up a clip beneath the down arrow. • Turn the WAC6500 series indoor AP counter-clockwise. NWA5000 / WAC6000 Series User’s Guide...
Page 194: Resetting The Nwa/Wac
Release the RESET button, and wait for the NWA/WAC to restart. You should be able to access the NWA/WAC using the default settings. 20.7 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more troubleshooting suggestions. NWA5000 / WAC6000 Series User’s Guide...
Page 195: Appendix A Importing Certificates
) somewhere in the main browser window (not all browsers show the padlock in the same location). Internet Explorer The following example uses Microsoft Internet Explorer 7 on Windows XP Professional; however, they can also apply to Internet Explorer on Windows Vista. NWA5000 / WAC6000 Series User’s Guide...
Page 196 If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Continue to this website (not recommended). In the Address Bar, click Certificate Error > View certificates. NWA5000 / WAC6000 Series User’s Guide...
Page 197 Appendix A Importing Certificates In the Certificate dialog box, click Install Certificate. In the Certificate Import Wizard, click Next. NWA5000 / WAC6000 Series User’s Guide...
Page 198 Next again and then go to step 9. Otherwise, select Place all certificates in the following store and then click Browse. In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK. NWA5000 / WAC6000 Series User’s Guide...
Page 199 Appendix A Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. 10 If you are presented with another Security Warning, click Yes. 11 Finally, click OK when presented with the successful certificate installation message. NWA5000 / WAC6000 Series User’s Guide...
Page 200 Double-click the public key certificate file. In the security warning dialog box, click Open. Refer to steps 4-12 in the Internet Explorer procedure beginning on page 195 to complete the installation process. NWA5000 / WAC6000 Series User’s Guide...

This manual is also suitable for:

Nwa5000 series Nwa5121-n Nwa5121-ni Nwa5123-ac Nwa5123-ni Nwa5301-nj ... Show all

ZyXEL Communications WAC6000 Series Manual

Chapter 1 Introduction

Chapter 3 Dashboard

Chapter 4 Monitor

Chapter 5 Network

Chapter 6 Wireless

Chapter 7 User

Chapter 8 AP Profile

Chapter 9 MON Profile

Chapter 10 WDS Profile

Chapter 11 Certificates

Chapter 12 System

Chapter 13 Log and Report

Chapter 14 File Manager

Chapter 15 Diagnostics

Chapter 16 Leds

Chapter 17 Antenna Switch

Chapter 18 Reboot

Chapter 19 Shutdown

Chapter 20 Troubleshooting

Appendix A Importing Certificates

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications WAC6000 Series

Summary of Contents for ZyXEL Communications WAC6000 Series

This manual is also suitable for:

Table of Contents