ZyXEL Communications VANTAGE RADIUS 50 User Manual

ZyXEL Communications VANTAGE RADIUS 50 User Manual

Hide thumbs Also See for VANTAGE RADIUS 50:
Table of Contents

Advertisement

Quick Links

Vantage RADIUS 50
User's Guide
Version 1.0
August 2004

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications VANTAGE RADIUS 50

  • Page 1 Vantage RADIUS 50 User’s Guide Version 1.0 August 2004...
  • Page 2 Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
  • Page 3 Certifications 1. Go to www.zyxel.com 2. Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3. Select the certification you wish to view from this page...
  • Page 4: Information For Canadian Users

    Vantage RADIUS User’s Guide Information for Canadian Users The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective, operation, and safety requirements. The Industry Canada does not guarantee that the equipment will operate to a user's satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommunications company.
  • Page 5: Zyxel Limited Warranty

    Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid.
  • Page 6: Customer Support

    Brief description of the problem and the steps you took to solve it. METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 www.zyxel.com ZyXEL Communications Corp. 6 Innovation Road II www.europe.zyxel.com Science Park Hsinchu 300 sales@zyxel.com.tw +886-3-578-2439 ftp.zyxel.com Taiwan ftp.europe.zyxel.com NORTH AMERICA support@zyxel.com +1-800-255-4101 www.us.zyxel.com...
  • Page 7: Table Of Contents

    Vantage RADIUS User’s Guide Table of Contents Copyright..............................ii Federal Communications Commission (FCC) Interference Statement..........iii Information for Canadian Users .......................iv ZyXEL Limited Warranty ..........................v Customer Support ............................vi List of Figures .............................xi List of Tables ............................xiii List of Charts .............................xv Preface ..............................xvii...
  • Page 8 Vantage RADIUS User’s Guide Basic Network Configuration .....................3-3 DHCP Server Setup ........................3-5 3.10 DHCP Client List........................3-7 3.11 Administrator’s Account......................3-8 3.12 Time Settings ..........................3-9 Chapter 4 System Logs ..........................4-1 Logs Overview..........................4-1 TFTP Server..........................4-2 Syslog server..........................4-2 System Log Messages.........................4-3 RADIUS Log Messages......................4-4 User Trace Records........................4-6 Real Time System Logs ......................4-7 System Log Files ........................4-9...
  • Page 9 Vantage RADIUS User’s Guide User Account..........................5-11 Importing A Certificate ......................5-13 Setting Up Your Access Point (AP) ..................5-16 Maintenance and Management........................6-1 Chapter 6 Maintenance ........................... 6-1 Overview............................ 6-1 System Status ..........................6-1 Firmware Upload ........................6-3 Configuration ..........................6-5 Chapter 7 Management...........................
  • Page 10 Vantage RADIUS User’s Guide Appendix H IP Subnetting........................H-1 Appendix I Command Interpreter......................I-1 Appendix J Power Adaptor Specifications .....................J-1 Appendix K Index ...........................K-1 Table of Contents...
  • Page 11: List Of Figures

    Vantage RADIUS User’s Guide List of Figures Figure 1-1 Secure Wireless Connection ......................1-7 Figure 2-1 Admin Account..........................2-2 Figure 2-2 Admin Account MAIN MENU Screen of the Web Configurator ..........2-4 Figure 3-1 IP Configuration ........................... 3-4 Figure 3-2 DHCP Server: Setup........................3-5 Figure 3-3 DHCP Server: Client List ......................
  • Page 12 Vantage RADIUS User’s Guide Figure 5-9 ZyAIR RADIUS Settings Example.....................5-17 Figure 5-10 ZyAIR Wireless Settings Example....................5-18 Figure 6-1 System Status ..........................6-2 Figure 6-2 F/W Upload...........................6-3 Figure 6-3 F/W Upload...........................6-4 Figure 6-4 Network Temporarily Disconnected....................6-4 Figure 6-5 Configuration Backup ........................6-5 Figure 6-6 Network Temporarily Disconnected....................6-7 Figure 7-1 HTTPS Implementation ........................7-3 Figure 7-2 SSH Communication Example......................7-3 Figure 7-3 How SSH Works ...........................7-4...
  • Page 13 Vantage RADIUS User’s Guide List of Tables Table 2-1 Web Configurator Screens Summary ..................... 2-5 Table 3-1 Example of Network Properties for LAN Servers with Fixed IP Addresses........3-2 Table 3-2 IP Configuration..........................3-4 Table 3-3 DHCP Server: Setup ........................3-6 Table 3-4 DHCP Server: Client List.......................
  • Page 14 Vantage RADIUS User’s Guide Table 7-1 Remote Access..........................7-8 Table 7-2 Remote Access: Add/Modify IP Address..................7-10 Table 7-3 Remote Access: Add/Modify Network IP Address ...............7-11 Table 7-4 SNMP Agent..........................7-14 Table 7-5 SNMP: Allowed IP Address......................7-16 Table 7-6 SNMP: Allowed Network Address ....................7-17 List of Tables...
  • Page 15 Vantage RADIUS User’s Guide List of Charts Chart A-1 Troubleshooting the Start-Up of Your Vantage RADIUS..............A-1 Chart A-2 Troubleshooting the Ethernet Interface ..................A-1 Chart A-3 Troubleshooting the Password.......................A-2 Chart A-4 Troubleshooting Telnet........................A-3 Chart B-1 ......................B-1 HARDWARE SPECIFICATIONS Chart B-2 firmware Specifications.........................B-1 Chart C-1 Power over Ethernet Injector Specifications .................C-1 Chart C-2 Power over Ethernet Injector RJ-45 Port Pin Assignments ............C-1 Chart H-1 Classes of IP Addresses.........................H-1...
  • Page 17: Preface

    Preface About This User's Manual Congratulations on your purchase of Vantage RADIUS 50. This manual is designed to guide you through the configuration of your Vantage RADIUS for its various applications. Use the web configurator, or command interpreter interface to configure your Vantage RADIUS Server.
  • Page 18 Vantage RADIUS User’s Guide • Mouse action sequences are denoted using a comma. For example, “click the Apple icon, Control Panels and then Modem” means first click the Apple icon, then point your mouse pointer to Control Panels and then click Modem. •...
  • Page 19: Getting Started

    Getting Started Part I: Getting Started This part helps you get to know your Vantage RADIUS, introduces the web configurator and how to configure for first use.
  • Page 21: Chapter 1 Getting To Know Your Vantage Radius

    Vantage RADIUS User’s Guide Chapter 1 Getting to Know Your Vantage RADIUS This chapter introduces the main features and applications of Vantage RADIUS. Introducing Vantage RADIUS Vantage RADIUS (Remote Authentication Dial-In User Service) 50 (referred to in this guide as Vantage RADIUS) is a standalone RADIUS server.
  • Page 22 Vantage RADIUS User’s Guide Reset Button The reset button is built into the front panel. Use this button to restore Vantage RADIUS to factory defaults. 1.2.2 Firmware All-in-one Box Vantage RADIUS consists of a private certificate authority, Remote Authentication Dial-In User Service Server, user account database and user’s connection records.
  • Page 23 Vantage RADIUS User’s Guide Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can have a static hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. You must register for this service with a Dynamic DNS service provider.
  • Page 24: Application

    Vantage RADIUS User’s Guide Vantage RADIUS uses the SSH (Secure Shell) secure communication protocol to provide secure encrypted communication between two hosts over an unsecured network. HTTPS HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL is a web protocol that encrypts and decrypts web sessions.
  • Page 25: Figure 1-1 Secure Wireless Connection

    Vantage RADIUS User’s Guide Client usernames and passwords are forwarded from a wireless network to Vantage RADIUS, which then validates them against its own list. This ensures that only individuals with valid accounts will be granted network access. Figure 1-1 Secure Wireless Connection The following gives an overview of Vantage RADIUS’...
  • Page 27: Chapter 2 Introducing The Web Configurator

    Vantage RADIUS User’s Guide Chapter 2 Introducing the Web Configurator This chapter describes how to access the web configurator, reset your Vantage RADIUS and navigate the menu system. Web Configurator Overview The embedded web configurator allows you to manage Vantage RADIUS from anywhere through a browser such as Microsoft Internet Explorer or Netscape Navigator.
  • Page 28: Figure 2-1 Admin Account

    Vantage RADIUS User’s Guide Figure 2-1 Admin Account Step 3. You should now see the web configurator MAIN MENU screen. Click the HELP icon (located in the top right corner of most screens) to view online help. Click a link under ADVANCED to configure device features. Click a link under RADIUS to enter user accounts for authentication and configure for use with your wireless access point.
  • Page 29: Resetting Vantage Radius

    Vantage RADIUS User’s Guide Resetting Vantage RADIUS If you forget your password or cannot access the web configurator, you will need to use the RESET button on the front panel of Vantage RADIUS to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”.
  • Page 30: Navigating The Web Configurator

    Vantage RADIUS User’s Guide Navigating the Web Configurator The following summarizes how to navigate the web configurator from the MAIN MENU screen. Navigation panel Click LOGOUT at any time to exit the web configurator. Figure 2-2 Admin Account MAIN MENU Screen of the Web Configurator 2.3.1 Navigation Panel After you enter the password, use the sub-menus on the navigation panel to configure Vantage RADIUS features.
  • Page 31: Table 2-1 Web Configurator Screens Summary

    Vantage RADIUS User’s Guide Table 2-1 Web Configurator Screens Summary LINK FUNCTION ADVANCED Use this screen to configure basic network configuration on Vantage RADIUS. DHCP SERVER Use this screen to configure the DHCP Server.. Select the DHCP Client List tab to display a list of all network clients using the DHCP server ADMIN Use this screen to change your system password and username.
  • Page 32 Vantage RADIUS User’s Guide Table 2-1 Web Configurator Screens Summary LINK FUNCTION USER TRACE Use these screens to monitor client access and generate log files. LOGOUT Click this label to exit the web configurator. Introducing the Web Configurator...
  • Page 33: Chapter 3 Advanced Settings

    Vantage RADIUS User’s Guide Chapter 3 Advanced Settings This chapter provides information on the advanced settings screens. Advanced Settings Overview The advanced settings screens allow you to configure your Vantage RADIUS for first use, including setting up Internet access for your wireless network, DHCP server settings, managing web configurator access, time server settings and configuring the types of log services available.
  • Page 34: Dns Server Address Assignment

    Your ISP should have given you the DNS server addresses, usually in the form of an information sheet, when you sign up. If you are using a ZyXEL gateway/router, you can use it’s DNS proxy feature by entering the LAN IP address of the gateway/router in the DNS field.
  • Page 35: Ip Pool Setup

    Vantage RADIUS User’s Guide the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. IP Pool Setup The IP pool specifies the number of consecutive IP addresses to reserve for computers on your network, starting from a specified IP address.
  • Page 36: Figure 3-1 Ip Configuration

    Vantage RADIUS User’s Guide Figure 3-1 IP Configuration The following table describes the labels in this screen. Table 3-2 IP Configuration LABEL DESCRIPTION Basic Network Configuration IP Address Type an IP address in dotted decimal notation. Netmask Type the IP subnet mask of the RADIUS server (if your ISP gave you one) in this field. Gateway Type the IP address of the gateway device used to connect your RADIUS to the Internet.
  • Page 37: Dhcp Server Setup

    Vantage RADIUS User’s Guide Table 3-2 IP Configuration LABEL DESCRIPTION MAC Address This field displays the physical address of your RADIUS server on the network. Apply Click Apply to save your changes back to the RADIUS. DHCP Server Setup Vantage RADIUS dynamically assigns IP addresses to clients. Click ADVANCED and then DHCP SERVER in the main menu to configure your Vantage RADIUS as a DHCP server.
  • Page 38: Table 3-3 Dhcp Server: Setup

    Vantage RADIUS User’s Guide Table 3-3 DHCP Server: Setup LABEL DESCRIPTION Set Up DHCP Server Enable/Disable DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients (workstations) to obtain TCP/IP configuration at startup from a server. Disable this field to stop the RADIUS acting as a DHCP server.
  • Page 39: 3.10 Dhcp Client List

    Vantage RADIUS User’s Guide 3.10 DHCP Client List Click ADVANCED in the main menu and then DHCP SERVER. Now click the DHCP Client List tab. The read-only information here relates to your DHCP status. The DHCP Client List shows current DHCP client information (including IP Address and MAC Address) of all network clients using the DHCP server.
  • Page 40: 3.11 Administrator's Account

    Vantage RADIUS User’s Guide 3.11 Administrator’s Account To change your RADIUS system password (recommended) click ADVANCED and then ADMIN ACCOUNT from the main menu. This screen allows you to change the administrator account name and password. Figure 3-4 Administrator Account The following table describes the labels in this screen.
  • Page 41: 3.12 Time Settings

    Vantage RADIUS User’s Guide 3.12 Time Settings Vantage RADIUS uses a system clock to synchronize time across the network and generates accurate log files. Time can be obtained from the connecting computer, or an NTP (Network Time Protocol) Server. To change your time settings, click ADVANCED in the main menu, and then click TIME.
  • Page 42: Table 3-6 Time Settings

    Vantage RADIUS User’s Guide Table 3-6 Time Settings LABEL DESCRIPTION Current Time Year/Month/Day This field displays the date of your RADIUS. Each time you reload this page, the RADIUS synchronizes the time with the time server. Hour: Minute: Second This field displays the time of your RADIUS. Each time you reload this page, the RADIUS synchronizes the time with the time server.
  • Page 43 Vantage RADIUS User’s Guide Table 3-6 Time Settings LABEL DESCRIPTION Daylight Saving Time Select this option if you use daylight savings time. Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening.
  • Page 45: Chapter 4 System Logs

    Vantage RADIUS User’s Guide Chapter 4 System Logs This chapter details the various logs generated by Vantage RADIUS and their role in your network. Logs Overview Vantage RADIUS generates log files that can be sent via e-mail or to a syslog server (see section 4.3) for troubleshooting, maintenance, monitoring clients’...
  • Page 46: Tftp Server

    Vantage RADIUS User’s Guide TFTP Server Trivial File Transfer Protocol (TFTP) is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). UDP is faster than TCP and more portable. The advantage is very fast transfer times that allows a server to perform real-time logging. Syslog server Syslog servers listen for incoming syslog messages and decodes them for logging purposes.
  • Page 47: System Log Messages

    Vantage RADIUS User’s Guide Figure 4-1 Syslog Application To avoid confusion about which log came from which Vantage RADIUS, you should configure each Vantage RADIUS on the network to send its log files to different log stores inside the syslog server. System Log Messages There are nine cases when a system log message is generated.
  • Page 48: Radius Log Messages

    Vantage RADIUS User’s Guide Table 4-2 System Logs MESSAGE MEANING Admin login Http OK/Fail : user = admin Someone has logged in to the web configurator using the source IP administrator account via an HTTP connection. Admin login https OK/Fail : user = admin Someone has logged in to the web configurator using the source IP administrator account via a telnet connection over a secured...
  • Page 49: Figure 4-2 Example Of Radius Log Messages

    Vantage RADIUS User’s Guide Figure 4-2 Example Of RADIUS Log Messages 4.5.1 Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and Vantage RADIUS for user authentication: • Access-Request Sent by an access point, requesting authentication. •...
  • Page 50: User Trace Records

    Vantage RADIUS User’s Guide • Access-Challenge Sent by Vantage RADIUS requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and Vantage RADIUS for user accounting: •...
  • Page 51: Real Time System Logs

    Vantage RADIUS User’s Guide This field displays the account This field displays the name of the name of the wireless client wireless AP used by the wireless client to connected to the network. connect to the network. These fields refer to the total number of packets transmitted (Output Packet) and received (Input Packet) by the wireless client.
  • Page 52: Figure 4-4 System Log: Real Time System Logs

    Vantage RADIUS User’s Guide Figure 4-4 SYSTEM LOG: Real Time System Logs The following table describes the labels in this screen. Table 4-3 SYSTEM LOG: Real Time System Logs LABEL DESCRIPTION System Log List Clear Log Click this button to remove all log entries from the System Log List. Refresh Click this button to update the System Log List with the most recent record- able events.
  • Page 53: System Log Files

    Vantage RADIUS User’s Guide Table 4-3 SYSTEM LOG: Real Time System Logs LABEL DESCRIPTION TFTP Log Now Click this button to send the current log to the TFTP server specified in the Log Settings screen. Make sure that you have first filled in the Send Every Real Time Event to Syslog server fields in the Log Settings screen, see section 4.13.
  • Page 54: Real Time Radius Logs

    Vantage RADIUS User’s Guide Table 4-4 SYSTEM LOG: Log Files LABEL DESCRIPTION This field displays the index of the log file. Date This field displays the date and time the last log file was added. File Name (View and Click this link to download the .txt log file from the TFTP server. The file is in Download) ASCII format and can be read by any text editor.
  • Page 55: 4.10 Radius Log Files

    Vantage RADIUS User’s Guide Table 4-5 RADIUS LOG: Real Time RADIUS Logs LABEL DESCRIPTION RADIUS Log List Clear Log Click this button to remove all entries Refresh Click this button to update the log entries Email Log Now Click Email Log Now to send logs to the e-mail address specified in the Log Settings screen.
  • Page 56: 4.11 User Trace

    Vantage RADIUS User’s Guide The following table describes the labels in this screen. Table 4-6 RADIUS LOG: Log Files LABEL DESCRIPTION Log File List This field displays the index of the log file. Date This field displays the date and time the last log file was added. File Name (View and Click this link to download the .txt log file from the TFTP server.
  • Page 57: 4.12 User Trace Log Files

    Vantage RADIUS User’s Guide The following table describes the labels in this screen. Table 4-7 USER TRACE: Real Time User Trace LABEL DESCRIPTION System Log List Clear Log Click this button to remove all entries Refresh Click this button to update the log entries Click Email Log Now to send the logs to the e-mail address specified in the Email Log Now Log Settings screen.
  • Page 58: 4.13 Log Settings Screen

    Vantage RADIUS User’s Guide Figure 4-9 User Trace: Log Files The following table describes the labels in this screen. Table 4-8 RADIUS Logs: Log Files LABEL DESCRIPTION Log File List This field displays the index of the log file. Date This field displays the date and time the log file was created.
  • Page 59: Figure 4-10 Radius Logs: Log Files

    Vantage RADIUS User’s Guide Figure 4-10 RADIUS Logs: Log Files The following table describes the labels in this screen. Table 4-9 RADIUS Logs: Log Files LABEL DESCRIPTION Send every real time event to syslog server Send every real time Enable this field to have Vantage RADIUS log every system, RADIUS and user event to syslog server events to a syslog server.
  • Page 60 Vantage RADIUS User’s Guide Table 4-9 RADIUS Logs: Log Files LABEL DESCRIPTION Radius Log Enable this field to record messages passed between your Vantage RADIUS and the wireless AP’s accessing it to the syslog server, see section 4.5. User Trace Enable this field to record wireless clients’...
  • Page 61 Vantage RADIUS User’s Guide Table 4-9 RADIUS Logs: Log Files LABEL DESCRIPTION Mail Address3 Type a third e-mail address if you want your log files to be sent to a third destination. System Log Enable this field to record system events for logging to the above e-mail addresses, see section 4.4.
  • Page 62: Radius Server

    RADIUS Server Part II: RADIUS Server This part introduces the RADIUS Server screens.
  • Page 63: Chapter 5 Radius Configuration

    Vantage RADIUS Server User’s Guide Chapter 5 RADIUS Configuration 802.1x Overview The IEEE 802.1x standard outlines enhanced security methods for both the authentication of wireless stations and encryption key management. Vantage RADIUS provides authentication for wireless access points. Introduction to RADIUS RADIUS is based on a client-sever model that supports authentication and accounting, where access point is the client and the server is the RADIUS server.
  • Page 64: Figure 5-1 Eap Authentication

    Vantage RADIUS Server User’s Guide network. In addition to the shared key, password information exchanged is also encrypted to protect the wired network from unauthorized access. 5.3.1 EAP Authentication Overview EAP (Extensible Authentication Protocol) is an authentication protocol that runs on top of the IEEE802.1x transport mechanism in order to support multiple types of user authentication.
  • Page 65 Vantage RADIUS Server User’s Guide MD5 authentication does not use certificates for authentication. If your wireless clients are not going to use other protocols for authentication, you do not need to configure any certificates. The Vantage RADIUS can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs.
  • Page 66: Trusted Root Ca

    Vantage RADIUS Server User’s Guide Trusted Root CA If your wireless clients use MD5 authentication protocol, you do not need to configure any certificates. Otherwise click RADIUS in the main menu and then click ROOT CA to set up a certificate for use with PEAP authentication.
  • Page 67: Server Certificate

    Vantage RADIUS Server User’s Guide Table 5-1 Trusted Root Certificate LABEL DESCRIPTION State Type up to 30 ASCII characters to identify your state, district or region. Locality Type up to 50 ASCII characters to identify the city or town where your organization’s office is located.
  • Page 68: Figure 5-3 Server Certificate

    Vantage RADIUS Server User’s Guide All the fields in this screen are required for the server certificate. Figure 5-3 Server Certificate The following table describes the labels in this screen. Table 5-2 Server Certificate LABEL DESCRIPTION Common Name Type up to 50 ASCII characters (not including spaces) to identify this certificate. Country Type two characters to identify the nation where the certificate owner is located.
  • Page 69: Radius Server

    Vantage RADIUS Server User’s Guide RADIUS Server Click RADIUS and then RADIUS SERVER in the main menu to set up your Vantage RADIUS to manage connections with wireless APs. The port settings are set by default. Wireless APs are required to use the same port settings.
  • Page 70 Vantage RADIUS Server User’s Guide Enter the port number of the accounting server. The default port number is 1813. Accounting Port Make sure your wireless AP uses the same port number. Allowed Access Type Allow Any IP Address Enable this field to have Vantage RADIUS accept connections from all incoming IP addresses using the shared secret below.
  • Page 71: Figure 5-5 Radius Server: Add New Ip Address

    Vantage RADIUS Server User’s Guide Description Click the button in this field to edit the information required to access your wireless AP. Action Select the check box next to the AP(s) description in this list that you want to delete, then click Delete to remove this entry. Delete Click this button to add an IP address of a wireless AP to the Allowed IP Address list.
  • Page 72: Figure 5-6 Radius Server: Add New Network Address

    Vantage RADIUS Server User’s Guide Type a description for identification purposes of your wireless AP in the Allowed Description IP Address list. Apply Click this button to save changes back to Vantage RADIUS and return to the RADIUS SERVER screen. 5.6.2 Insert/Modify Allowed Network Range This screen allows you to specify a network range in which an AP is allowed to communicate with Vantage RADIUS.
  • Page 73: User Account

    Vantage RADIUS Server User’s Guide Table 5-5 RADIUS Add New Network Address LABEL DESCRIPTION Allowed Network Address Network Address Type the first address in your network. This is the start address from which Vantage RADIUS uses the Netmask to allow access from many APs. Netmask This field displays subnet mask used to specify the network range limits for accepted IP addresses.
  • Page 74: Figure 5-8 User Account: Add New User

    Vantage RADIUS Server User’s Guide Table 5-6 User Account LABEL DESCRIPTION User Account List The maximum number of configurable accounts is 200. Vantage RADIUS allows up to 50 connections at the same time. Duplicate usernames and passwords are allowed. Add New User Click this button to add a new user account.
  • Page 75: Importing A Certificate

    Vantage RADIUS Server User’s Guide The following table describes the labels in this screen. Table 5-7 User Account: Add New User LABEL DESCRIPTION User Name Type the wireless client’s username. The username can consist of up to 80 alphanumeric characters and is case sensitive. Enter Password Type the password corresponding to the name above.
  • Page 76 Vantage RADIUS Server User’s Guide Step 2. Click Install Certificate to open the Certificate Import Wizard as shown below. Then click Next. 5-14 RADIUS Configuration...
  • Page 77 Vantage RADIUS Server User’s Guide Step 3. Click Automatically select the certificate store based on the type of certificate, or if you prefer, specify the location for the certificate to be stored, then click Next. Step 4. Click Yes to add this certificate to your computer. The Certificate Import Wizard dialog box appears as below.
  • Page 78: Setting Up Your Access Point (Ap)

    This section assumes knowledge of how to configure a management session on your AP. The following examples use screenshots from ZyXEL’s ZyAIR G-3000. Actual screens and products differ from the ones displayed. Please consult your AP’s User’s Guide before making the changes below.
  • Page 79: Figure 5-9 Zyair Radius Settings Example

    Vantage RADIUS Server User’s Guide 1. Enable these fields to activate authentication and accounting services. 3. Type the port number of the RADIUS server. The 2. Enter the IP default port numbers are address of the shown. RADIUS server You need not change in dotted decimal these values unless you notation.
  • Page 80: Figure 5-10 Zyair Wireless Settings Example

    Vantage RADIUS Server User’s Guide The authentication database contains wireless station login information. Vantage RADIUS is an external authentication server. Use this drop-down list box to select the order the wireless AP checks the databases to authenticate a wireless station. 1.
  • Page 81: Maintenance And Management

    Maintenance and Management Part III: Maintenance and Management This part explains how to maintain and manage your Vantage RADIUS.
  • Page 83: Chapter 6 Maintenance

    Vantage RADIUS User’s Guide Chapter 6 Maintenance This chapter covers system maintenance screens Overview The maintenance screens can help you view system information, upload new firmware and manage your configuration. System Status This screen displays details about the Vantage RADIUS firmware, time running since last startup, and a list of wireless clients authenticated and currently connected to the network.
  • Page 84: Figure 6-1 System Status

    Vantage RADIUS User’s Guide Figure 6-1 System Status The following table describes the labels in this screen. Table 6-1 System Status LABEL DESCRIPTION System Status Boot Rom This field displays the Boot Rom’s version number. Firmware This field displays the firmware version number. System Up Time This field displays the length of time since Vantage RADIUS server was last started.
  • Page 85: Firmware Upload

    This field displays the length of time the wireless client is connected for. Firmware Upload Find the latest firmware at www.ZyXEL.com in a file that uses the system model name with a "*.bin" extension, e.g., "Vantage.bin". The upload process may take up to two minutes. After a successful upload, the system will reboot.
  • Page 86: Figure 6-3 F/W Upload

    Vantage RADIUS User’s Guide Figure 6-3 F/W Upload LABEL DESCRIPTION Update firmware from local file. Local PC File Path Type in the location of the file you want to upload in this field or click Browse to find it. Browse... Click this button to find the .bin file you want to upload.
  • Page 87: Configuration

    Vantage RADIUS User’s Guide Configuration Click MAINTENANCE, and then the Configuration tab. Use this screen to backup or restore Vantage RADIUS configuration. Figure 6-5 Configuration Backup 6.4.1 Configuration Backup Configuration Backup allows you to backup (save) the current system (Vantage RADIUS) configuration to your computer or a TFTP server.
  • Page 88: Table 6-3 Configuration Restore

    Vantage RADIUS User’s Guide Table 6-2 Configuration Backup LABEL DESCRIPTION Remote TFTP Type the IP address of the TFTP server. Server File Name Type the filename of the file to backup. Apply Click this button to begin the backup process. 6.4.2 Configuration Restore Restore Configuration allows you to restore a previously saved configuration file from your computer to your Vantage RADIUS.
  • Page 89: Figure 6-6 Network Temporarily Disconnected

    Vantage RADIUS User’s Guide Figure 6-6 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.3). See your Quick Start Guide or the Appendices for details on how to set up your computer’s IP address.
  • Page 91: Chapter 7 Management

    Vantage RADIUS User’s Guide Chapter 7 Management This chapter details how to configure your Vantage RADIUS for remote access Remote Management Overview Remote management allows you to determine which services/protocols can access which Vantage RADIUS interface (if any) from which computers. To disable remote management of a service, select Disable in the corresponding field.
  • Page 92: Introduction To Https

    Vantage RADIUS User’s Guide 7.1.2 System Timeout There is a system timeout of five minutes (three hundred seconds) for either the console port or telnet/web/FTP connections. Your Vantage RADIUS automatically logs you out if you do nothing in this timeout period. See the REMOTE ACCESS screen to change the timeout period in the Idle Time Out field.
  • Page 93: Ssh

    Vantage RADIUS User’s Guide Figure 7-1 HTTPS Implementation If you disable HTTP (Disable) in the REMOTE ACCESS screen, then Vantage RADIUS blocks all HTTP connection attempts. Unlike Telnet, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network.
  • Page 94: Secure Telnet Using Ssh Examples

    Vantage RADIUS User’s Guide 7.3.1 How SSH works The following table summarizes how a secure connection is established between two remote hosts. 1. Host Identification The SSH client sends a connection request to the SSH server. The server identifies itself with a host key.
  • Page 95: Figure 7-4 Ssh Example 1: Store Host Key

    Vantage RADIUS User’s Guide 7.4.1 Example 1: Microsoft Windows This section describes how to access Vantage RADIUS using the Secure Shell Client program. Step 1. Launch the SSH client and specify the connection information (IP address, port number or device name) for Vantage RADIUS. Step 2.
  • Page 96: Telnet

    Vantage RADIUS User’s Guide A message displays indicating the SSH protocol version supported by Vantage RADIUS. $ telnet 192.168.1.1 22 Trying 192.168.1.1... Connected to 192.168.1.1. Escape character is '^]'. SSH-1.5-1.0.0 Figure 7-5 SSH Example 2: Test Step 3. Enter “ssh –2 192.168.1.3”. This command forces your computer to connect to Vantage RADIUS using SSH version 1.
  • Page 97: Remote Access

    Vantage RADIUS User’s Guide Figure 7-7 Telnet Configuration on a TCP/IP Network Remote Access To configure your Vantage RADIUS for remote access, click MANAGEMENT in the main menu, and then click REMOTE ACCESS. Management...
  • Page 98: Figure 7-8 Remote Access

    Vantage RADIUS User’s Guide Figure 7-8 Remote Access Table 7-1 Remote Access LABEL DESCRIPTION Allowed Access Type Allow Any IP Address Enable this field to have Vantage RADIUS accept connections from all incoming IP addresses. Allow Specified IP Enable this field to have Vantage RADIUS restricts access to the list of network Address / Network addresses and IP addresses in the Allow IP Address and Allowed Network Address...
  • Page 99 Vantage RADIUS User’s Guide Table 7-1 Remote Access LABEL DESCRIPTION SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network. Enable this field to allow SSH access to the Vantage RADIUS. You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management...
  • Page 100: Figure 7-9 Remote Access: Add/Modify Ip Address

    Vantage RADIUS User’s Guide Table 7-1 Remote Access LABEL DESCRIPTION This field displays the index number. Network IP Address This field displays the network address in which a client is allowed to use the services to manage Vantage RADIUS. Netmask This field displays the subnet mask used to specify the network range limits for accepted IP addresses.
  • Page 101: Figure 7-10 Remote Access: Add/Modify Network Ip Address

    Vantage RADIUS User’s Guide Table 7-2 Remote Access: Add/Modify IP Address LABEL DESCRIPTION Apply Click this button to save changes back to Vantage RADIUS and return to the REMOTE ACCESS screen. 7.6.2 Insert/Modify Allowed Network IP Address In the REMOTE ACCESS screen, click Add to insert a new entry in the Allowed Network IP Address list,.
  • Page 102: Snmp

    Vantage RADIUS User’s Guide SNMP Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your Vantage RADIUS supports SNMP agent functionality, which allows a manager station to manage and monitor Vantage RADIUS through the network.
  • Page 103 Vantage RADIUS User’s Guide An agent is a management software module that resides in a managed device (Vantage RADIUS). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices.
  • Page 104: Configuring Snmp

    Vantage RADIUS User’s Guide Configuring SNMP To configure your SNMP settings, click MAINTENANCE in the main menu, and then click SNMP AGENT. Figure 7-12 SNMP Agent Table 7-4 SNMP Agent LABEL DESCRIPTION SNMP Agent Setup Enable Click this radio button to allow SNMP access to Vantage RADIUS. Disable Click this radio button to have Vantage RADIUS ignore SNMP requests.
  • Page 105 Vantage RADIUS User’s Guide Table 7-4 SNMP Agent LABEL DESCRIPTION SNMP Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Trap Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management.
  • Page 106: Figure 7-13 Snmp: Allowed Ip Address

    Vantage RADIUS User’s Guide 7.8.1 Insert/Modify Allowed IP Address In the SNMP AGENT screen, click Add to insert a new entry in the Allowed IP Address list. To edit an existing entry, click the Modify button next to an IP address you want to change. Figure 7-13 SNMP: Allowed IP Address Table 7-5 SNMP: Allowed IP Address LABEL...
  • Page 107: User Trace Records

    Vantage RADIUS User’s Guide Figure 7-14 SNMP: Allowed Network Address Table 7-6 SNMP: Allowed Network Address LABEL DESCRIPTION Allowed Network Address Community Type the community, which is the password sent with each request to the SNMP manager. The default is public and allows all requests. Network Address Type the first address in your network.
  • Page 108: Appendices

    Appendices APPENDICES This part provides troubleshooting and background information about setting up your computer’s IP address, wireless LAN, 802.1x and IP subnetting. It also provides information on the command interpreter interface.
  • Page 109: Appendix A Troubleshooting

    Vantage RADIUS User’s Guide Appendix A Troubleshooting This appendix covers potential problems and possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. Problems Starting Up Vantage RADIUS Chart A-1 Troubleshooting the Start-Up of Your Vantage RADIUS PROBLEM CORRECTIVE ACTION None of the LEDs...
  • Page 110: Chart A-3 Troubleshooting The Password

    Vantage RADIUS User’s Guide Chart A-2 Troubleshooting the Ethernet Interface PROBLEM CORRECTIVE ACTION I cannot ping any If the ETHERNET LED on the front panel is off, check the Ethernet cable computer on the connections between your Vantage RADIUS and the Ethernet device. LAN.
  • Page 111: Chart A-4 Troubleshooting Telnet

    Vantage RADIUS User’s Guide Problems with Telnet Chart A-4 Troubleshooting Telnet PROBLEM CORRECTIVE ACTION I cannot access Refer to the Problems with the Ethernet Interface section for instructions on checking Vantage RADIUS your Ethernet connection. through Telnet. Check that telnet is enabled in the REMOTE MANAGEMENT screen. Troubleshooting...
  • Page 113: Appendix B Specifications

    Vantage RADIUS User’s Guide Appendix B Specifications Hardware Chart B-1 HARDWARE SPECIFICATIONS Power Specification DC 5V 3Amp Max. Operation Temperature 0º C ~ 50º C Storage Temperature -10º C ~ 60º C Operation Humidity 10% to 90% (Non-condensing) Storage Humidity 5% to 95% (Non-condensing) Firmware CHART B-2 FIRMWARE SPECIFICATIONS...
  • Page 114 Vantage RADIUS User’s Guide CHART B-2 FIRMWARE SPECIFICATIONS Diagnostics Capabilities The access point can perform self-diagnostic tests. These tests check the integrity of the following circuits: FLASH memory. DRAM. Dual Ethernet port. Syslog. RADIUS log User Trace log. Management Embedded Web Configurator management. Command-line interface.
  • Page 115: Appendix C Power Over Ethernet Specifications

    Vantage RADIUS User’s Guide Appendix C Power over Ethernet Specifications You can use a power over Ethernet injector to power this device. The injector must comply to IEEE 802.3af. Chart C-1 Power over Ethernet Injector Specifications Power Output 15.4 Watts maximum Power Current 400 mA maximum Chart C-2 Power over Ethernet Injector RJ-45 Port Pin Assignments...
  • Page 117: Appendix D Setting Up Your Computer's Ip Address

    Vantage RADIUS User’s Guide Appendix D Setting up Your Computer’s IP Address This appendix is a general guide on how to set an IP address on your computer or have it receive an IP address automatically if the device you are connecting it to can assign it an IP address.
  • Page 118 Vantage RADIUS User’s Guide Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: In the Network window, click Add.
  • Page 119 Vantage RADIUS User’s Guide Select Microsoft from the list of manufacturers. Select Client for Microsoft Networks from the list of network clients and then click OK. Restart your computer so the changes you made take effect. In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties.
  • Page 120 Vantage RADIUS User’s Guide Click the DNS Configuration tab. -If you do not know your DNS information, select Disable DNS. -If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in).
  • Page 121 Vantage RADIUS User’s Guide remove previously installed gateways. -If you have a gateway IP address, type it in the New gateway field and click Add. Click OK to save and close the TCP/IP Properties window. Click OK to close the Network window. Insert the Windows CD if prompted. Turn on your Vantage RADIUS and restart your computer when prompted.
  • Page 122 Vantage RADIUS User’s Guide For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. For Windows XP, click Network Right-click Local Area Connection and Connections. For Windows 2000/NT, click then click Properties. Network and Dial-up Connections. Setting Up Your Computer’s IP Address...
  • Page 123 Vantage RADIUS User’s Guide Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. Setting Up Your Computer’s IP Address...
  • Page 124 Vantage RADIUS User’s Guide The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically. -If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields.
  • Page 125 Vantage RADIUS User’s Guide -Click Add. -Repeat the previous three steps for each default gateway you want to add. -Click OK when finished. In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
  • Page 126 Vantage RADIUS User’s Guide Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. D-10 Setting Up Your Computer’s IP Address...
  • Page 127 Vantage RADIUS User’s Guide Select Ethernet built-in from the Connect via list. For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box.
  • Page 128 Vantage RADIUS User’s Guide Click the Apple menu, and click System Preferences to open the System Preferences window. Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list.
  • Page 129 Vantage RADIUS User’s Guide Appendix E Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connection.
  • Page 130 Vantage RADIUS User’s Guide standard was developed to maximize interoperability between differing brands of wireless LANs as well as to introduce a variety of performance improvements and benefits. The IEEE 802.11 specifies three different transmission methods for the PHY, the layer responsible for transferring data between nodes.
  • Page 131 Vantage RADIUS User’s Guide Diagram E-1 Peer-to-Peer Communication in an Ad-hoc Network Infrastructure Wireless LAN Configuration For infrastructure WLANs, multiple access points (APs) link the WLAN to the wired network and allow users to efficiently share network resources. The access points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood.
  • Page 132 Vantage RADIUS User’s Guide Diagram E-2 ESS Provides Campus-Wide Coverage Wireless LAN and IEEE 802.11...
  • Page 133: Appendix F Wireless Lan With Ieee 802.1X

    Vantage RADIUS User’s Guide Appendix F Wireless LAN With IEEE 802.1x As wireless networks become popular for both portable computing and corporate networks, security is now a priority. Security Flaws with IEEE 802.11 Wireless networks based on the original IEEE 802.11 have a poor reputation for safety. The IEEE 802.11b wireless access standard, first published in 1999, was based on the MAC address.
  • Page 134 Vantage RADIUS User’s Guide • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. • Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the wireless stations.
  • Page 135: Appendix G Types Of Eap Authentication

    Vantage RADIUS User’s Guide Appendix G Types of EAP Authentication This appendix discusses the five popular EAP authentication types: EAP-MD5, EAP-TLS, EAP- TTLS, PEAP and LEAP. The type of authentication you use depends on the RADIUS server. Consult your network administrator for more information. EAP-MD5 (Message-Digest Algorithm 5) MD5 authentication is the simplest one-way authentication method.
  • Page 136 Vantage RADIUS User’s Guide PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication.
  • Page 137: Appendix Hip Subnetting

    Vantage RADIUS User’s Guide Appendix H IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.
  • Page 138: Chart H-2 Allowed Ip Address Range By Class

    Vantage RADIUS User’s Guide A class “C” network (8 host bits) can have 2 –2 or 254 hosts. A class “B” address (16 host bits) can have 2 –2 or 65534 hosts. A class “A” address (24 host bits) can have 2 –2 hosts (approximately 16 million hosts).
  • Page 139: Chart H-4 Alternative Subnet Mask Notation

    Vantage RADIUS User’s Guide Subnetting With subnetting, the class arrangement of an IP address is ignored. For example, a class C address no longer has to have 24 bits of network number and 8 bits of host ID. With subnetting, some of the host ID bits are converted into network number bits.
  • Page 140: Chart H-5 Subnet 1

    Vantage RADIUS User’s Guide Subnet Mask 255.255.255. Subnet Mask (Binary) 11111111.11111111.11111111. 00000000 The first three octets of the address make up the network number (class “C”). You want to have two separate networks. Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit.
  • Page 141: Chart H-7 Subnet 1

    Vantage RADIUS User’s Guide 10000000 Subnet Mask (Binary) 11111111.11111111.11111111. Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 The remaining 7 bits determine the number of hosts each subnet can have. Host IDs of all zeros represent the subnet itself and host IDs of all ones are the broadcast address for that subnet, so the actual number of hosts available on each subnet in the example above is 2 –...
  • Page 142: Chart H-9 Subnet 3

    Vantage RADIUS User’s Guide IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 01000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.64 Lowest Host ID: 192.168.1.65 Broadcast Address: 192.168.1.127 Highest Host ID: 192.168.1.126 Chart H-9 Subnet 3 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1.
  • Page 143: Chart H-11 Eight Subnets

    Vantage RADIUS User’s Guide Chart H-11 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS The following table is a summary for class “C” subnet planning. Chart H-12 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO.
  • Page 144: Chart H-13 Class B Subnet Planning

    Vantage RADIUS User’s Guide The following table is a summary for class “B” subnet planning. Chart H-13 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.128.0 (/17) 32766 255.255.192.0 (/18) 16382 255.255.224.0 (/19) 8190 255.255.240.0 (/20) 4094...
  • Page 145: Appendix I Command Interpreter

    Vantage RADIUS User’s Guide Appendix I Command Interpreter The following describes how to use the command interpreter. Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable. Command Syntax The interface outputs are in courier new font. Command keywords are emboldened and you should enter them exactly as shown, do not abbreviate.
  • Page 146 Vantage RADIUS User’s Guide help [netconf|exit] help [http/https] Type h or help before a command to see its usage. Vantage> help netconf netconf netconf ip [IP address] netmask [netmask] gateway [gateway IP address] netconf dns1 [dns1 IP address] dns2 [dns2 IP address] Vantage>...
  • Page 147 Vantage RADIUS User’s Guide IP Address : 192.168.1.3 Netmask : 255.255.255.0 Gateway : 192.168.1.254 Primary DNS : 168.95.1.1 Secondary DNS : 168.95.192.1 : 00:00:84:40:50:05 For example, if you wanted to change the IP address on your Vantage RADIUS from 192.168.1.3 to 192.168.1.40 because another device has the same IP address and also the gateway address has changed to 192.168.1.154, type the following: netconf IP 192.168.1.40 gateway 192.168.1.154...
  • Page 148 Vantage RADIUS User’s Guide Type http, to show the current status of your HTTP settings. Vantage> http REMOTE ACCESS HTTP : yes Port : 80 Type http enable to allow remote HTTP access to Vantage RADIUS. Type http disable to have Vantage RADIUS block remote http access. https Type https, to show the current status of your HTTPS settings.
  • Page 149: Appendix J Power Adaptor Specifications

    Vantage RADIUS User’s Guide Appendix J Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adaptor Model HPW-1005U Input Power AC120V/60HZ Output Power DC 5V Power Consumption 2.2W Safety Standards UL/C-UL EUROPEAN PLUG STANDARDS AC Power Adaptor Model HPW-1005U Input Power AC220V/50HZ Output Power DC 5V...
  • Page 150 Vantage RADIUS User’s Guide Power Consumption 1.8 W Safety Standards AUSTRALIA AND NEW ZEALAND PLUG STANDARDS AC Power Adaptor Model HPW-1005U Input Power AC240V/50HZ Output Power DC 5V Power Consumption 6.5W Safety Standards Power Adaptor Specifications...
  • Page 151: Appendix K Index

    Vantage RADIUS User’s Guide Appendix K Index Access- Challenge ........4-6 CA............G-1 Access- Request ........4-6 Canada ............iv Access- Response ........4-6 Caution ............iv Access-Accept ......... 4-5 Certificate Authority......See CA Access-Reject .......... 4-5 Certificates........1-5, 5-3 Access-Request ........4-5 Importing ...........
  • Page 152 Vantage RADIUS User’s Guide DHCP Client List ........3-7 Frequency-Hopping Spread Spectrum..E-2 DHCP Pool ..........3-6 FTP ...........3-3, 7-1 DHCP Server Client List ......3-7 FTP Restrictions ........7-1 DHCP Server Setup......... 3-5 Digital IDs ..........5-3 Direct Sequence Spread Spectrum ..E-2 General Specifications ......
  • Page 153 Vantage RADIUS User’s Guide RADIUS Logs ........4-10 Real Time System ....... 4-7 RADIUS ..........5-1 Settings ..........4-14 RADIUS Message Types......4-5 System Events ........4-3 RADIUS Server........5-7 System Log Files ......... 4-9 Related Documentation ......xvii User Trace Events ....... 4-6 Remote Access .........1-5, 7-7 User Trace Log Files ......
  • Page 154 Wireless LAN and IEEE 802.11....E-1 Trademarks..........ii Wireless Network Authentication.... 1-6 Transport Layer Security....See TLS WLAN ......See Wireless LAN Troubleshooting........A-1 www.zyxel.com .......... v Accessing ZyAIR ....... A-3 Ethernet ..........A-1 Ethernet Port........A-1 Password..........A-2 ZyAIR G-3000 RADIUS Setup Example.. 5- Password..........

Table of Contents