Page 1 User’s Guide NWA1123 Series 802.11 a/b/g/n/ac Hybrid Access Point Default Login Details Version 5.20 Edition 1, 02/2018 LAN IP Address DHCP-assigned http://192.168.1.2 User Name admin Password 1234 Copyright © 2018 Zyxel Communications Corporation...
Page 2 Note: It is recommended you use the Web Configurator to configure the NWA1123. • Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information. • More Information Go to support.zyxel.com to find other information on the NWA1123 NWA1123 Series User’s Guide...
Page 3: Document Conventions
IP Setting tab to get to that screen. Icons Used in Figures Figures in this guide may use the following generic icons. The NWA1123 icon is not an exact representation of your device. NWA1123 Router Switch Internet Server Desktop Laptop NWA1123 Series User’s Guide...
Page 4: Table Of Contents
Diagnostics ............................173 LEDs ..............................175 Antenna Switch ..........................177 Reboot ..............................179 Shutdown ............................. 180 Cloud Management ........................181 Cloud Mode ............................182 The Web Configurator ........................188 Dashboard ............................192 Network ............................... 194 Troubleshooting ..........................198 NWA1123 Series User’s Guide...
Page 5: Table Of Contents
The Web Configurator........................26 3.1 Overview ............................26 3.2 Accessing the Web Configurator ....................26 3.3 Navigating the Web Configurator ....................28 3.3.1 Title Bar ........................... 28 3.3.2 Navigation Panel ........................31 3.3.3 Warning Messages ........................ 34 NWA1123 Series User’s Guide...
Page 6 6.8 View Log ............................60 Chapter 7 Network...............................63 7.1 Overview ............................63 7.1.1 What You Can Do in this Chapter ..................63 7.2 IP Setting ............................63 7.3 VLAN ..............................65 7.4 NCC Discovery ..........................68 Chapter 8 Wireless ...............................69 NWA1123 Series User’s Guide...
Page 7 10.6 Layer-2 Isolation List ........................104 10.6.1 Add/Edit Layer-2 Isolation Profile ..................106 Chapter 11 WDS Profile ............................107 11.1 Overview ............................. 107 11.1.1 What You Can Do in this Chapter ................... 107 11.2 WDS Profile ........................... 107 NWA1123 Series User’s Guide...
Page 8 13.5.5 Examples of Secure Telnet Using SSH ................142 13.6 Telnet ............................144 13.7 FTP ..............................144 13.8 SNMP ............................145 13.8.1 Supported MIBs ......................... 146 13.8.2 SNMP Traps ......................... 147 13.8.3 Configuring SNMP ......................147 NWA1123 Series User’s Guide...
Page 9 17.1.1 What You Can Do in this Chapter ................... 175 17.2 Suppression Screen ........................175 17.3 Locator Screen .......................... 176 Chapter 18 Antenna Switch ..........................177 18.1 Overview ............................. 177 18.1.1 What You Need To Know ....................177 18.2 Antenna Switch Screen ......................177 NWA1123 Series User’s Guide...
Page 10 22.3.1 Title Bar ..........................189 22.3.2 Navigation Panel ......................190 22.3.3 Warning Messages ......................191 Chapter 23 Dashboard ............................192 23.1 Overview ............................. 192 23.1.1 What You Can Do in this Chapter ................... 192 23.2 Dashboard ..........................192 Chapter 24 Network.............................194 NWA1123 Series User’s Guide...
Page 11 25.6 Resetting the NWA1123 ......................205 25.7 Getting More Troubleshooting Help ..................206 Appendix A Importing Certificates ....................207 Appendix B IPv6..........................220 Appendix C Customer Support ..................... 228 Appendix D Legal Information ...................... 234 Index ..............................243 NWA1123 Series User’s Guide...
Page 12: Introduction
This User’s Guide covers the following models: NWA1123-ACv2, NWA1123-AC PRO, and NWA1123-AC HD. Your NWA1123 is a wireless AP (Access Point). It extends the range of your existing wired network without additional wiring, providing easy network access to mobile users. Table 1 NWA1123 Series Comparison Table FEATURES NWA1123-AC...
Page 13: Management Mode
Note: The NWA1123 goes into cloud management mode automatically after it can access the NCC through the specified proxy server (if any) and is successfully registered in the NCC. Its login password and wireless settings are then overwritten with what you have configured in the NCC. NWA1123 Series User’s Guide...
Page 14: Mbssid
Guest_SSID is the wireless network for guest users. In this example, the guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet. NWA1123 Series User’s Guide...
Page 15: Dual-Radio
Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming. NWA1123 Series User’s Guide...
Page 16: Root Ap
(X and Y) to extend the range of its wireless network at the same time. In the figure below, both clients A, B and C can access the wired network through the root AP. Figure 3 Root AP Application NWA1123 Series User’s Guide...
Page 17: Repeater
AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section 8.2 on page Section 11.2 on page 107 for more details. NWA1123 Series User’s Guide...
Page 18 Chapter 1 Introduction Once the security settings of peer sides match one another, the connection between devices is made. At the time of writing, repeater security is compatible with the NWA1123 only. NWA1123 Series User’s Guide...
Page 19: Standalone Configuration
Standalone Configuration...
Page 20: Standalone Ap Mode
User’s Guide provides information about the Web Configurator. Command-Line Interface (CLI) The CLI allows you to use text-based commands to configure the NWA1123. You can access it using remote management (for example, SSH or Telnet). See the Command Reference Guide for more information. NWA1123 Series User’s Guide...
Page 21: Good Habits For Managing The Nwa1123
The LEDs of your NWA1123 can be controlled by using the Suppression feature such that the LEDs stay lit (ON) or OFF after the device is ready. Following are LED descriptions for the NWA1123 series models. 2.5.1 NWA1123-AC PRO The LEDs will stay ON when the NWA1123-AC PRO is ready. You can change this setting in the Maintenance >...
Page 22 The antenna switch is set to “Ceiling” for the radio. The 2.4 GHz WLAN is active. Amber The antenna switch is set to “Wall” for the radio. The 2.4 GHz WLAN is active. The 2.4 GHz WLAN is not active. NWA1123 Series User’s Guide...
Page 23: Nwa1123-Acv2
The Locator is activated and will show the actual location of the NWA1123 between several devices in the network. The Locator function is off. 2.5.2 NWA1123-ACv2 The following are the LED descriptions for your NWA1123-ACv2. Figure 6 NWA1123-ACv2 LED NWA1123 Series User’s Guide...
Page 24: Nwa1123-Ac Hd
Green Amber The wireless LAN is disabled or fails. Green Slow Blinking (On for 1s, Off for 1s) 2.5.3 NWA1123-AC HD The following are the LED descriptions for your NWA1123-AC HD. Figure 7 NWA1123-AC HD LED NWA1123 Series User’s Guide...
Page 25: Starting And Stopping The Nwa1123
It does not stop the system processes or write cached data to local storage. The NWA1123 does not stop or start the system processes when you apply configuration files or run shell scripts although you may temporarily lose access to network resources. NWA1123 Series User’s Guide...
Page 26: The Web Configurator
Enter the user name (default: “admin”) and password (default: “1234”). Click Login. When the NWA1123 is connected to the Internet, a Visit button will also display. Click the button to open the NCC web site login page in a new tab or window. NWA1123 Series User’s Guide...
Page 27 NWA1123. Use the Zyxel Nebula Mobile app to scan the QR code. The NWA1123 will be registered and assigned to an existing site/organization in the NCC automatically. Click OK to close the screen, NWA1123 Series User’s Guide...
Page 28: Navigating The Web Configurator
The icons provide the following functions. Table 6 Title Bar: Web Configurator Icons LABEL DESCRIPTION Logout Click this to log out of the Web Configurator. Wizard Click this to open the wizard. See Chapter 4 on page 37 for more information. NWA1123 Series User’s Guide...
Page 29 This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. Click this to close the screen. Site Map Click Site MAP to see an overview of links to the Web Configurator screens. Click a screen’s link to go to that screen. NWA1123 Series User’s Guide...
Page 30 This field is a sequential value, and it is not associated with any entry. Service This is the type of setting that references the selected object. Click a service’s name to display the service’s configuration screen in the main window. NWA1123 Series User’s Guide...
Page 31: Navigation Panel
The following sections introduce the NWA1123’s navigation panel menus and their screens. NWA1123 Series User’s Guide...
Page 32 Table 10 Configuration Menu Screens Summary FOLDER OR LINK FUNCTION Network IP Setting Configure the IP address for the NWA1123 Ethernet interface. VLAN Manage the Ethernet interface VLAN settings. NCC Discovery Configures proxy server settings to access the NCC. NWA1123 Series User’s Guide...
Page 33 Configuration File Manage and upload configuration files for the NWA1123. Firmware Package View the current firmware version and to upload firmware. Shell Script Manage and run shell script files for the NWA1123. Diagnostics Diagnostics Collect diagnostic information. NWA1123 Series User’s Guide...
Page 34: Warning Messages
Here are some examples of what you can do: • Sort in ascending alphabetical order • Sort in descending (reverse) alphabetical order • Select which columns to display • Group entries by field NWA1123 Series User’s Guide...
Page 35 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time. NWA1123 Series User’s Guide...
Page 36 To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate. Object Reference Select an entry and click Object Reference to open a screen that shows which settings use the entry. NWA1123 Series User’s Guide...
Page 37: Setup Wizard
• Offset allows you to specify how much the clock changes when daylight saving begins and ends. Enter a number from 1 to 5.5 (by 0.5 increments). Click Prev to return to the previous screen. Click Next to proceed. Click Cancel to close the wizard without saving. NWA1123 Series User’s Guide...
Page 38: Step 2 Password And Uplink Connection
The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. Click Prev to return to the previous screen. Click Next to proceed. Click Cancel to close the wizard without saving. NWA1123 Series User’s Guide...
Page 39: Step 3 Radio
APs in an area, decrease the output power of the NWA1123 to reduce interference with other APs. Note: Reducing the output power also reduces the NWA1123’s effective broadcast radius. Click Prev to return to the previous screen. Click Next to proceed. Click Cancel to close the wizard without saving. NWA1123 Series User’s Guide...
Page 40: Step 4 Ssid
Section 4.2.4.1 on page 40 for more information. Note: You cannot add or remove an SSID profile after running the setup wizard. Figure 19 Wizard: SSID 4.2.4.1 Edit SSID Profile Use this screen to configure an SSID profile. NWA1123 Series User’s Guide...
Page 41 RADIUS server. You have to enter the IP address, port number and shared secret password of the RADIUS server to be used for authentication. Click OK to proceed. Click Cancel to close the screen without saving. Figure 20 Wizard: SSID: Edit (WPA2) NWA1123 Series User’s Guide...
Page 42: Summary
Use this screen to check whether what you have configured is correct. Click Save to apply your settings and complete the wizard setup. Otherwise, click Prev to return to the previous screen or click Cancel to close the wizard without saving. Figure 22 Wizard: Summary NWA1123 Series User’s Guide...
Page 43: Dashboard
Dashboard icon in the navigation panel. The Dashboard displays general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs. You can also collapse, refresh, and close individual widgets. NWA1123 Series User’s Guide...
Page 44 Click the icon to open the screen where you can upload firmware. Last Firmware This field displays whether the latest firmware update was successfully completed. Upgrade Status Last Firmware This field displays the date and time when the last firmware update was made. Upgrade NWA1123 Series User’s Guide...
Page 45 This field displays the current date and time in the NWA1123. The format is yyyy-mm-dd Time hh:mm:ss. Current Login This field displays the user name used to log in to the current session, the amount of User reauthentication time remaining, and the amount of lease time remaining. NWA1123 Series User’s Guide...
Page 46 If the interface has a static IP address, this shows n/a. If the interface has a dynamic IP address, use this field to get or to update the IP address for the interface. Click Renew to send a new DHCP request to a DHCP server. NWA1123 Series User’s Guide...
Page 47: Cpu Usage
This displays the number of detected friendly APs. 5.2.1 CPU Usage Use this screen to look at a chart of the NWA1123’s recent CPU usage. To access this screen, click CPU Usage in the dashboard. Figure 24 Dashboard > CPU Usage NWA1123 Series User’s Guide...
Page 48: Memory Usage
The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA1123 Series User’s Guide...
Page 49: Monitor
Friendly AP Friendly APs are other wireless access points that are detected in your network, as well as any others that you know are not a threat (those from neighboring networks, for example). NWA1123 Series User’s Guide...
Page 50: Network Status
Monitor > Network Status. The screen varies depending on whether the NWA1123 has an extra Ethernet port (except the uplink port). Figure 26 Monitor > Network Status (for NWA1123 with one Ethernet port) Figure 27 Monitor > Network Status (for NWA1123 with multiple Ethernet ports) NWA1123 Series User’s Guide...
Page 51 This field displays the number of collisions on the physical port since it was last connected. This field displays the transmission speed, in bytes per second, on the physical port in the one- second interval before the screen updated. NWA1123 Series User’s Guide...
Page 52: Port Statistics Graph
The y-axis represents the speed of transmission or reception. Time The x-axis shows the time period over which the transmission or reception occurred. This line represents traffic transmitted from the NWA1123 on the physical port since it was last connected. NWA1123 Series User’s Guide...
Page 53: Radio List
Table 19 Monitor > Wireless > AP Information > Radio List LABEL DESCRIPTION More Information Click this to view additional information about the selected radio’s wireless traffic and station count. Information spans a 24 hour period. Status This displays whether or not the radio is enabled. NWA1123 Series User’s Guide...
Page 54: Ap Mode Radio Information
This screen allows you to view a selected radio’s SSID details, wireless traffic statistics and station count for the preceding 24 hours. To access this window, select a radio and click the More Information button in the Radio List screen. NWA1123 Series User’s Guide...
Page 55 This list shows information about all the wireless clients that have connected to the specified radio over the preceding 24 hours. This is the items sequential number in the list. It has no bearing on the actual data in this list. NWA1123 Series User’s Guide...
Page 56: Station List
This is the station’s MAC address. Radio This is the radio number on the NWA1123 to which the station is connected. Capability This displays the supported standard currently being used by the station or the standards supported by the station. NWA1123 Series User’s Guide...
Page 57: Wds Link Info
When the NWA1123 is in repeater mode and connected to a root AP and other repeater(s), both the uplink and downlink information would be displayed. This is the index number of the root AP or repeater in this list. NWA1123 Series User’s Guide...
Page 58: Detected Device
Use this screen to view information about suspected rogue APs. Click Monitor > Wireless > Detected Device to access this screen. Note: Turn on rogue AP detection in the Configuration > Wireless > Rogue AP screen to detect rogue APs. NWA1123 Series User’s Guide...
Page 59 This shows how many devices are detected as friendly APs. Un-classified AP This shows how many devices are detected, but have not been classified by the NWA1123. Detect Now Click this button for the NWA1123 to scan for APs in the network. Detected Device NWA1123 Series User’s Guide...
Page 60: View Log
Events that generate an alert (as well as a log message) display in red. Regular logs display in black. Click a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order. NWA1123 Series User’s Guide...
Page 61 This field is read-only if the Category is Debug Log. Source Address This displays when you show the filter. Type the source IP address of the incoming packet that generated the log message. Do not include the port in this filter. NWA1123 Series User’s Guide...
Page 62 This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. The Web Configurator saves the filter settings if you leave the View Log screen and return to it later. NWA1123 Series User’s Guide...
Page 63: Network
(Section 7.4 on page 68) configures the NWA1123’s Nebula Control Center (NCC) discovery settings. 7.2 IP Setting Use this screen to configure the IP address for your NWA1123. To access this screen, click Configuration > Network > IP Setting. NWA1123 Series User’s Guide...
Page 64 Assignment Enable Stateless Select this to enable IPv6 stateless auto-configuration on the NWA1123. The NWA1123 will Address Auto- generate an IPv6 address itself from a prefix obtained from an IPv6 router in the network. configuration (SLAAC) NWA1123 Series User’s Guide...
Page 65: Vlan
Figure 38 Management VLAN Setup In the figure above, to access and manage the NWA1123 from computer A, the NWA1123 and switch B’s ports to which computer A and the NWA1123 are connected should be in the same VLAN. NWA1123 Series User’s Guide...
Page 66 Use this screen to configure the VLAN settings for your NWA1123. To access this screen, click Configuration > Network > VLAN. The screen varies depending on whether the NWA1123 has an extra Ethernet port (except the uplink port). Figure 39 Configuration > Network > VLAN (for NWA1123 with multiple Ethernet ports) NWA1123 Series User’s Guide...
Page 67 This field indicates whether the VLAN is enabled (a yellow bulb) or not (a gray bulb). Name This field displays the name of each VLAN. This field displays the VLAN ID. Member This field displays the VLAN membership to which the port belongs. NWA1123 Series User’s Guide...
Page 68: Ncc Discovery
NCC. User Name Enter your proxy user name. Password Enter your proxy password. Apply Click Apply to save your changes back to the NWA1123. Reset Click Reset to return the screen to its last-saved settings. NWA1123 Series User’s Guide...
Page 69: Wireless
AP list. • The Load Balancing screen (Section 8.4 on page 76) configures network traffic load balancing between the APs and the NWA1123. • The DCS screen (Section 8.5 on page 78) configures dynamic radio channel selection. NWA1123 Series User’s Guide...
Page 70: What You Need To Know
(AP) or you limit the amount of wireless traffic transmitted and received on it so the AP does not become overloaded. 8.2 AP Management Use this screen to manage the NWA1123’s general wireless settings. Click Configuration > Wireless > AP Management to access this screen. NWA1123 Series User’s Guide...
Page 71 Figure 43 Configuration > Wireless > AP Management Each field is described in the following table. Table 28 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the check box to enable the NWA1123’s first (default) radio. NWA1123 Series User’s Guide...
Page 72 APs (in repeater mode) to form a WDS to extend its wireless network. Repeater means the radio can establish a wireless connection with other APs (in either root AP or repeater mode) to form a WDS. NWA1123 Series User’s Guide...
Page 73: Rogue Ap
Click Configuration > Wireless > Rogue AP to access this screen. NWA1123 Series User’s Guide...
Page 74 Click this button to add an AP to the list and assign it either friendly or rogue status. Edit Select an AP in the list to edit and reassign its status. Remove Select an AP in the list to remove. NWA1123 Series User’s Guide...
Page 75: Add/Edit Rogue/Friendly List
Enter up to 60 characters for the AP’s description. Spaces and underscores are allowed. Role Select either Rogue AP or Friendly AP for the AP’s role. Click OK to save your changes back to the NWA1123. Cancel Click Cancel to close the window with changes unsaved. NWA1123 Series User’s Guide...
Page 76: Load Balancing
Select the threshold traffic level at which the NWA1123 begins load balancing its connections (Low, Medium, High). The maximum bandwidth allowed for each level is: • Low - 11 Mbps, • Medium - 23 Mbps • High - 35M bps NWA1123 Series User’s Guide...
Page 77: Disassociating And Delaying Connections
AP over its allotment, say to 7 Mbps, then the AP delays the red laptop’s connection until it can afford the bandwidth or the laptop is picked up by a different AP with bandwidth to spare. Figure 47 Delaying a Connection NWA1123 Series User’s Guide...
Page 78: Dcs
Click this to have the NWA1123 scan for and select an available channel immediately. Apply Click Apply to save your changes back to the NWA1123. Reset Click Reset to return the screen to its last-saved settings. NWA1123 Series User’s Guide...
Page 79: Technical Reference
1, 4, 7 and 11. While they are situated sufficiently close to both each other and the three so-called “safe” channels (1,6 and 11) that interference becomes inevitable, the severity of it is dependent upon other factors: proximity to the affected AP, signal strength, activity, and so on. NWA1123 Series User’s Guide...
Page 80 AP has the bandwidth to spare. If too many people connect and the AP hits its bandwidth cap then all new connections must basically wait for their turn or get shunted to the nearest identical AP. NWA1123 Series User’s Guide...
Page 81: User
Perform basic diagnostics (CLI) Access Users user Used for the embedded RADIUS server and SNMPv3 user access Browse user-mode commands (CLI) Note: The default admin account is always authenticated locally, regardless of the authentication method setting. NWA1123 Series User’s Guide...
Page 82: User Summary
9.2.1.1 Rules for User Names Enter a user name from 1 to 31 characters. The user name can only contain the following characters: • Alphanumeric A-z 0-9 (there is no unicode support) • _ [underscores] • - [dashes] NWA1123 Series User’s Guide...
Page 83 Enter the password of this user account. It can consist of 4 - 63 alphanumeric characters. Retype Re-enter the password to make sure you have entered it correctly. Description Enter the description of each user, if any. You can use up to 60 printable ASCII characters. Default descriptions are provided. NWA1123 Series User’s Guide...
Page 84: Setting
9.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the NWA1123. To access this screen, login to the Web Configurator, and click Configuration > Object > User > Setting. NWA1123 Series User’s Guide...
Page 85 NWA1123 in one session before having to log in again. Unlike Lease Time, the user has no opportunity to renew the session without logging out. User Logon Settings NWA1123 Series User’s Guide...
Page 86: Edit User Authentication Timeout Settings
To access this screen, go to the Configuration > Object > User > Setting screen, select one of the Default Authentication Timeout Settings entry and click the Edit icon. Figure 56 User > Setting > Edit User Authentication Timeout Settings NWA1123 Series User’s Guide...
Page 87 0 to make the number of minutes unlimited. Unlike Lease Time, the user has no opportunity to renew the session without logging out. Click OK to save your changes back to the NWA1123. Cancel Click Cancel to exit this screen without saving your changes. NWA1123 Series User’s Guide...
Page 88: Ap Profile
The SSID (Service Set IDentifier) is the name that identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. In other words, it is the name of the wireless network that clients use to connect to it. NWA1123 Series User’s Guide...
Page 89: Radio
Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile. Activate To turn on an entry, select it and click Activate. NWA1123 Series User’s Guide...
Page 90: Add/Edit Radio Profile
This screen allows you to create a new radio profile or edit an existing one. To access this screen, click the Add button or select a radio profile from the list and click the Edit button. NWA1123 Series User’s Guide...
Page 91 Table 39 Configuration > Object > AP Profile > Add/Edit Profile LABEL DESCRIPTION Hide / Show Click this to hide or show the Advanced Settings in this window. Advanced Settings General Settings Activate Select this option to make this profile active. NWA1123 Series User’s Guide...
Page 92 Channel ID This field is available only when you set Channel Selection to DCS and set 2.4 GHz Channel Selection Method to manual. Select the channels that you want the NWA1123 to use. NWA1123 Series User’s Guide...
Page 93 The guard interval is the gap introduced between data transmission from users in order to reduce interference. Reducing the interval increases data transfer rates but also increases interference. Increasing the interval reduces data transfer rates but also reduces interference. NWA1123 Series User’s Guide...
Page 94 Set the maximum number of times a wireless client can attempt to re-connect to the AP Count Allow 802.11n/ac Select this option to allow only 802.11 n/ac clients to connect, and reject 802.11a/b/g stations only clients. Multicast Settings NWA1123 Series User’s Guide...
Page 95: Ssid
To access this screen click Configuration > Object > AP Profile > SSID > SSID List. Note: You cannot add or remove an SSID profile after running the setup wizard. Figure 59 Configuration > Object > AP Profile > SSID > SSID List (Default) NWA1123 Series User’s Guide...
Page 96: Add/Edit Ssid Profile
This screen allows you to create a new SSID profile or edit an existing one. To access this screen, click the Add button or select a SSID profile from the list and click the Edit button. NWA1123 Series User’s Guide...
Page 97 MAC filtering allows you to limit the wireless clients connecting to your network through a particular SSID by wireless client MAC addresses. Any clients that have MAC addresses not in the MAC filtering profile of allowed addresses are denied connections. The disable setting means no MAC filtering is used. NWA1123 Series User’s Guide...
Page 98 MAC address of a target IP address. Select this option to allow the NWA1123 to answer ARP requests for an IP address on behalf of a client associated with this SSID. This can reduce broadcast traffic and improve network performance. NWA1123 Series User’s Guide...
Page 99: Security List
This screen allows you to create a new security profile or edit an existing one. To access this screen, click the Add button or select a security profile from the list and click the Edit button. NWA1123 Series User’s Guide...
Page 100 Chapter 10 AP Profile Note: This screen’s options change based on the Security Mode selected. Only the default screen is displayed here. Figure 63 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile NWA1123 Series User’s Guide...
Page 101 Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. Authentication Type Select a WEP authentication method. Choices are Open or Share key. Share key is only available if you are not using 802.1x. NWA1123 Series User’s Guide...
Page 102 Select Required and wireless clients must support MFP in order to join the NWA1123’s wireless network. Click OK to save your changes back to the NWA1123. Cancel Click Cancel to exit this screen without saving your changes. NWA1123 Series User’s Guide...
Page 103: Mac Filter List
This screen allows you to create a new MAC filtering profile or edit an existing one. To access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of 512 MAC addresses. NWA1123 Series User’s Guide...
Page 104: Layer-2 Isolation List
(B). The router provides access to the Internet and the network printer (C) while preventing the client from accessing other computers and servers on the network. The client can communicate with other wireless clients only if Intra-BSS Traffic blocking is disabled. NWA1123 Series User’s Guide...
Page 105 Click this to view which other objects are linked to the selected MAC filtering profile (for Reference example, SSID profile). This field is a sequential value, and it is not associated with a specific user. Profile Name This field indicates the name assigned to the layer-2 isolation profile. NWA1123 Series User’s Guide...
Page 106: Add/Edit Layer-2 Isolation Profile
Enter up to 60 characters, spaces and underscores allowed. Click OK to save your changes back to the NWA1123. Cancel Click Cancel to exit this screen without saving your changes. NWA1123 Series User’s Guide...
Page 107: Wds Profile
This field is a sequential value, and it is not associated with a specific profile. Profile Name This field indicates the name assigned to the profile. WDS SSID This field shows the SSID specified in this WDS profile. NWA1123 Series User’s Guide...
Page 108: Add/Edit Wds Profile
64 hexadecimal characters. The key is used to encrypt the traffic between the APs. Click OK to save your changes back to the NWA1123. Cancel Click Cancel to exit this screen without saving your changes. NWA1123 Series User’s Guide...
Page 109: Certificates
Jenny receives the message and uses Tim’s public key to verify it. Jenny knows that the message is from Tim, and that although other people may have been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim’s private key). NWA1123 Series User’s Guide...
Page 110 The NWA1123 currently allows the importation of a PKS#7 file that contains a single certificate. • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. NWA1123 Series User’s Guide...
Page 111: Verifying A Certificate
Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation. Possible examples would be over the telephone or through an HTTPS connection. NWA1123 Series User’s Guide...
Page 112: My Certificates
This field displays identifying information about the certificate’s owner, such as CN (Common Name), OU (Organizational Unit or department), O (Organization or company) and C (Country). It is recommended that each certificate have unique subject information. NWA1123 Series User’s Guide...
Page 113: Add My Certificates
Certificates screen. Use this screen to have the NWA1123 create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request. Figure 72 Configuration > Object > Certificate > My Certificates > Add NWA1123 Series User’s Guide...
Page 114 Certificate Edit screen to view the certification request and copy it to send to the locally for later certification authority. manual enrollment Copy the certification request from the My Certificate Edit screen and then send it to the certification authority. NWA1123 Series User’s Guide...
Page 115: Edit My Certificates
Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open the My Certificate Edit screen. You can use this screen to view in-depth certificate information and change the certificate’s name. NWA1123 Series User’s Guide...
Page 116 Chapter 12 Certificates Figure 73 Configuration > Object > Certificate > My Certificates > Edit NWA1123 Series User’s Guide...
Page 117 This field displays general information about the certificate. For example, Subject Type=CA means that this is a certification authority’s certificate and “Path Length Constraint=1” means that there can only be one certification authority in the certificate’s path. This field does not display for a certification request. NWA1123 Series User’s Guide...
Page 118: Import Certificates
NWA1123. You can also import a certificate in PKCS#12 format, including the certificate’s public and private keys. The certificate you import replaces the corresponding request in the My Certificates screen. You must remove any spaces in the certificate’s filename before you can import it. NWA1123 Series User’s Guide...
Page 119: Trusted Certificates
This screen displays a summary list of certificates that you have set the NWA1123 to accept as trusted. The NWA1123 also accepts any valid certificate signed by a certificate on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certificates. NWA1123 Series User’s Guide...
Page 120: Edit Trusted Certificates
Trusted Certificates Edit screen. Use this screen to view in-depth information about the certificate, change the certificate’s name and set whether or not you want the NWA1123 to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. NWA1123 Series User’s Guide...
Page 121 Chapter 12 Certificates Figure 76 Configuration > Object > Certificate > Trusted Certificates > Edit NWA1123 Series User’s Guide...
Page 122 This field displays the type of algorithm that was used to sign the certificate. Some certification authorities use rsa-pkcs1-sha1 (RSA public-private key encryption algorithm and the SHA1 hash algorithm). Other certification authorities may use rsa-pkcs1-md5 (RSA public-private key encryption algorithm and the MD5 hash algorithm). NWA1123 Series User’s Guide...
Page 123: Import Trusted Certificates
Click Configuration > Object > Certificate > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to save a trusted certificate to the NWA1123. Note: You must remove any spaces from the certificate’s filename before you can import the certificate. NWA1123 Series User’s Guide...
Page 124: Technical Reference
The second is a reduction in network traffic since the NWA1123 only gets information on the certificates that it needs to verify, not a huge list. When the NWA1123 requests certificate status information, the OCSP server returns a “expired”, “current” or “unknown” response. NWA1123 Series User’s Guide...
Page 125: System
13.2 Host Name A host name is the unique name by which a device is known on a network. Click Configuration > System > Host Name to open this screen. Figure 78 Configuration > System > Host Name NWA1123 Series User’s Guide...
Page 126: Date And Time
> Date/Time. The screen displays as shown. You can manually set the NWA1123’s time and date or have the NWA1123 get the date and time from a time server. Figure 79 Configuration > System > Date/Time NWA1123 Series User’s Guide...
Page 127 GMT or UTC). So in the European Union you would select Last, Sunday, March. The time you type in the at field depends on your time zone. In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). NWA1123 Series User’s Guide...
Page 128: Pre-Defined Ntp Time Servers List
Click the Sync. Now button to get the time and date from the time server you specified in the Time Server Address field. When the Loading message appears, you may have to wait up to one minute. Figure 80 Loading NWA1123 Series User’s Guide...
Page 129: Www Overview
Click Apply. 13.4 WWW Overview The following figure shows secure and insecure management of the NWA1123 coming in from the WAN. HTTPS and SSH access are secure. HTTP, Telnet, and FTP management access are not secure. NWA1123 Series User’s Guide...
Page 130: Service Access Limitations
Authenticate Client Certificates in the WWW screen). Authenticate Client Certificates is optional and if selected means the HTTPS client must send the NWA1123 a certificate. You must apply for a certificate for the browser from a CA that is a trusted CA on the NWA1123. NWA1123 Series User’s Guide...
Page 131: Configuring Www Service Control
13.4.4 Configuring WWW Service Control Click Configuration > System > WWW to open the WWW screen. Use this screen to specify HTTP or HTTPS settings. Figure 83 Configuration > System > WWW > Service Control NWA1123 Series User’s Guide...
Page 132: Https Example
NWA1123 IP Address/” as the web site address where “NWA1123 IP Address” is the IP address or domain name of the NWA1123 you wish to access. 13.4.5.1 Internet Explorer Warning Messages When you attempt to access the NWA1123 HTTPS server, you will see the error message shown in the following screen. NWA1123 Series User’s Guide...
Page 133 Click Technical Details if you want to verify more information about the certificate from the NWA1123. Select I Understand the Risks and then click Add Exception to add the NWA1123 to the security exception list. Click Confirm Security Exception. NWA1123 Series User’s Guide...
Page 134 • The issuing certificate authority of the NWA1123’s HTTPS server certificate is not one of the browser’s trusted certificate authorities. The issuing certificate authority of the NWA1123's factory default certificate is the NWA1123 itself since the certificate is a self-signed certificate. NWA1123 Series User’s Guide...
Page 135 Apply for a certificate from a Certification Authority (CA) that is trusted by the NWA1123 (see the NWA1123’s Trusted Certificates Web Configurator screen). Figure 87 Trusted Certificates The CA sends you a package containing the CA’s trusted certificate(s), your personal certificate(s) and a password to install the personal certificate(s). NWA1123 Series User’s Guide...
Page 136 You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment. Double-click the personal certificate given to you by the CA to produce a screen similar to the one shown next. NWA1123 Series User’s Guide...
Page 137 Chapter 13 System Click Next to begin the wizard. The file name and path of the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA1123 Series User’s Guide...
Page 138 Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA1123 Series User’s Guide...
Page 139 You should see the following screen when the certificate is correctly installed on your computer. 13.4.5.7 Using a Certificate When Accessing the NWA1123 To access the NWA1123 via HTTPS: Enter ‘https://NWA1123 IP Address/’ in your browser’s web address field. NWA1123 Series User’s Guide...
Page 140: Ssh
B on the Internet uses SSH to securely connect to the NWA1123 (A) for a management session. Figure 88 SSH Communication Over the WAN Example 13.5.1 How SSH Works The following figure is an example of how a secure connection is established between two remote hosts using SSH v1. NWA1123 Series User’s Guide...
Page 141: Ssh Implementation On The Nwa1123
13.5.2 SSH Implementation on the NWA1123 Your NWA1123 supports SSH versions 1 and 2 using RSA authentication and four encryption methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the NWA1123 for management using port 22 (by default). NWA1123 Series User’s Guide...
Page 142: Requirements For Using Ssh
NWA1123. The configuration and connection steps are similar for most SSH client programs. Refer to your SSH client program user’s guide. 13.5.5.1 Example 1: Microsoft Windows This section describes how to access the NWA1123 using the Secure Shell Client program. NWA1123 Series User’s Guide...
Page 143 The authenticity of host '192.168.1.2 (192.168.1.2)' can't be established. RSA1 key fingerprint is 21:6c:07:25:7e:f4:75:80:ec:af:bd:d4:3d:80:53:d1. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '192.168.1.2' (RSA1) to the list of known hosts. Administrator@192.168.1.2's password: NWA1123 Series User’s Guide...
Page 144: Telnet
Chapter 15 on page 162 for more information about firmware and configuration files. To change your NWA1123’s FTP settings, click Configuration > System > FTP tab. The screen appears as shown. Use this screen to specify FTP settings. NWA1123 Series User’s Guide...
Page 145: Snmp
Your NWA1123 supports SNMP agent functionality, which allows a manager station to manage and monitor the NWA1123 through the network. The NWA1123 supports SNMP version one (SNMPv1), version two (SNMPv2c), and version three (SNMPv3). The next figure illustrates an SNMP management operation. NWA1123 Series User’s Guide...
Page 146: Supported Mibs
The NWA1123 supports MIB II that is defined in RFC-1213 and RFC-1215. The NWA1123 also supports private MIBs (ZYXEL-ES-CAPWAP.MIB, ZYXEL-ES-COMMON.MIB, ZYXEL-ES-ZyXELAPMgmt.MIB, ZYXEL-ES- PROWLAN.MIB, ZYXEL-ES-RFMGMT.MIB, ZYXEL-ES-SMI.MIB, and ZYXEL-ES-WIRELESS.MIB) to collect information about CPU and memory usage and VPN total throughput. The focus of the MIBs is to let NWA1123 Series User’s Guide...
Page 147: Snmp Traps
Select the check box to allow or disallow users to access the NWA1123 using SNMP. Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Trap NWA1123 Series User’s Guide...
Page 148: Adding Or Editing An Snmpv3 User Profile
This screen allows you to add or edit an SNMPv3 user profile. To access this screen, click the Configuration > System > SNMP screen’s Add button or select a SNMPv3 user profile from the list and click the Edit button. Figure 98 Configuration > System > SNMP > Add NWA1123 Series User’s Guide...
Page 149 Select whether the SNMPv3 user can have read-only or read and write access to the NWA1123 using this SNMPv3 user profile. Click OK to save your changes back to the NWA1123. Cancel Click Cancel to exit this screen without saving your changes. NWA1123 Series User’s Guide...
Page 150: Log And Report
Note: Data collection may decrease the NWA1123’s traffic throughput rate. Click Configuration > Log & Report > Email Daily Report to display the following screen. Configure this screen to have the NWA1123 e-mail you system statistics every day. NWA1123 Series User’s Guide...
Page 151 Table 67 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION Enable Email Select this to send reports by e-mail every day. Daily Report Mail Server Type the name or IP address of the outgoing SMTP server. NWA1123 Series User’s Guide...
Page 152: Log Setting
The Log Setting screen provides a summary of all the settings. You can use the Edit Log Setting screen to maintain the detailed settings (such as log categories, e-mail addresses, server names, etc.) for any log. NWA1123 Series User’s Guide...
Page 153: Log Setting Screen
This field is a sequential value, and it is not associated with a specific log. Status This field shows whether the log is active or not. Name This field displays the name of the log (system log or one of the remote servers). NWA1123 Series User’s Guide...
Page 154: Edit System Log Settings
14.3.2 Edit System Log Settings This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. NWA1123 Series User’s Guide...
Page 155 Chapter 14 Log and Report Figure 101 Configuration > Log & Report > Log Setting > Edit System Log Setting NWA1123 Series User’s Guide...
Page 156 NWA1123 will e-mail logs to them. enable normal logs and debug logs (yellow check mark) - create log messages, alerts, and debugging information for all categories. The NWA1123 does not e-mail debugging information, even if this setting is selected. NWA1123 Series User’s Guide...
Page 157 Message field. Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA1123 Series User’s Guide...
Page 158: Edit Remote Server
This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. Figure 102 Configuration > Log & Report > Log Setting > Edit Remote Server NWA1123 Series User’s Guide...
Page 159: Active Log Summary
It does not let you change other log settings (for example, where and how often log information is e-mailed or remote server names). To access this screen, go to the Log Setting screen, and click the Active Log Summary button. NWA1123 Series User’s Guide...
Page 160 If e-mail server 1 or 2 also has normal logs enabled, the NWA1123 will e-mail logs to them. enable normal logs and debug logs (yellow check mark) - create log messages, alerts, and debugging information for all categories. The NWA1123 does not e-mail debugging information, even if this setting is selected. NWA1123 Series User’s Guide...
Page 161 (yellow check mark) - log regular information, alerts, and debugging information from this category Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA1123 Series User’s Guide...
Page 162: File Manager
# change administrator password username admin password 4321 user-type admin #configure default radio profile, change 2GHz channel to 11 & Tx output power # to 50% wlan-radio-profile default 2g-channel 11 output-power 50% exit write NWA1123 Series User’s Guide...
Page 163: Configuration File
Click Maintenance > File Manager > Configuration File to open this screen. Use the Configuration File screen to store, run, and name configuration files. You can also download configuration files from the NWA1123 to your computer and upload configuration files from your computer to the NWA1123. NWA1123 Series User’s Guide...
Page 164 The NWA1123 still generates a log for any errors. Figure 105 Maintenance > File Manager > Configuration File Do not turn off the NWA1123 while configuration file upload is in progress. NWA1123 Series User’s Guide...
Page 165 Specify a name for the duplicate configuration file. Use up to 25 characters (including a-zA-Z0- 9;‘~!@#$%^&()_+[]{}’,.=-). Click OK to save the duplicate or click Cancel to close the screen without saving a duplicate of the configuration file. NWA1123 Series User’s Guide...
Page 166 If you upload and apply a configuration file with an error, you can apply lastgood.conf to return to a valid configuration. Size This column displays the size (in KB) of a configuration file. NWA1123 Series User’s Guide...
Page 167: Example Of Configuration File Download Using Ftp
Use “dir” or “ls” if you need to display a list of the files in the directory. Use "get” to download files. Transfer the configuration file on the NWA1123 to your computer. Type get followed by the name of the configuration file. This examples uses get startup-config.conf. NWA1123 Series User’s Guide...
Page 168: Firmware Package
Find the firmware package at www.zyxel.com in a file that (usually) uses a .bin extension. The firmware update can take up to five minutes. Do not turn off or reset the NWA1123 while the firmware update is in progress! NWA1123 Series User’s Guide...
Page 169: Example Of Firmware Upload Using Ftp
This procedure requires the NWA1123’s firmware. Download the firmware package from www.zyxel.com and unzip it. The firmware file uses a .bin extension, for example, "510ABFH0C0.bin". Do the following after you have obtained the firmware file. Connect your computer to the NWA1123. NWA1123 Series User’s Guide...
Page 170: Shell Script
Note: You should include write commands in your scripts. If you do not use the write command, the changes will be lost when the NWA1123 restarts. You could use multiple write commands in a long script. NWA1123 Series User’s Guide...
Page 171 The bottom part of the screen allows you to upload a new or previously saved shell script file from Script your computer to your NWA1123. File Path Type in the location of the file you want to upload in this field or click Browse... to find it. NWA1123 Series User’s Guide...
Page 172 Table 75 Maintenance > File Manager > Shell Script (continued) LABEL DESCRIPTION Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA1123 Series User’s Guide...
Page 173: Diagnostics
This screen provides an easy way for you to generate a file containing the NWA1123’s configuration and diagnostic information. You may need to generate this file and send it to customer support during troubleshooting. Click Maintenance > Diagnostics to open the Diagnostic screen. Figure 109 Maintenance > Diagnostics NWA1123 Series User’s Guide...
Page 174 Maintenance > File Manager > Shell Script screen. Collect Now Click this to have the NWA1123 create a new diagnostic file. Download Click this to save the most recent diagnostic file to a computer. NWA1123 Series User’s Guide...
Page 175: Leds
, the LEDs will lit regardless of NWA1123 is booting or performing firmware upgrade the setting in LED suppression. To access this screen, click Maintenance > LEDs > Suppression. Figure 110 Maintenance > LEDs > Suppression NWA1123 Series User’s Guide...
Page 176: Locator Screen
Enter a time interval between 1 and 60 minutes to stop the locator LED from blinking. After Default is 10 minutes. Apply Click Apply to save changes in this screen. Refresh Click Refresh to update the information in this screen. NWA1123 Series User’s Guide...
Page 177: Antenna Switch
Note: The antenna switch in the web configurator has priority over the physical antenna switch after you Enable Software Control in the Maintenance > Antenna screen. By default, software control is disabled. 18.2 Antenna Switch Screen To access this screen, click Maintenance > Antenna. NWA1123 Series User’s Guide...
Page 178 Select Wall if you mount the NWA1123 to a wall. Select Ceiling if the NWA1123 is mounted on a ceiling. You can switch from Wall to Ceiling if there are still wireless dead zones, and vice versa. NWA1123 Series User’s Guide...
Page 179: Reboot
Click the Reboot button to restart the NWA1123. Wait a few minutes until the login screen appears. If the login screen does not appear, type the IP address of the device in your Web browser. You can also use the CLI command reboot to restart the NWA1123. NWA1123 Series User’s Guide...
Page 180: Shutdown
Click the Shutdown button to shut down the NWA1123. Wait for the device to shut down before you manually turn off or remove the power. It does not turn off the power. You can also use the CLI command shutdown to shut down the NWA1123. NWA1123 Series User’s Guide...
Page 181: Cloud Management
Cloud Management...
Page 182: Cloud Mode
IP address before connecting it to the Internet, use its built-in Web Configurator. Web Configurator The Web Configurator allows basic NWA1123 setup and monitoring using an Internet browser. This User’s Guide provides information about the Web Configurator. NWA1123 Series User’s Guide...
Page 183: Good Habits For Managing The Nwa1123
See your Quick Start Guide for information on making hardware connections. 21.5 LEDs Following are LED descriptions for the NWA1123 series models. 21.5.1 NWA1123-AC PRO The LEDs will stay ON when the NWA1123-AC PRO is ready. You can change this setting through the NCC (Nebula Control Center).
Page 184 Amber - The port is operating as a 100-Mbps connection. Green Green - The port is operating as a Gigabit connection (1000 Mbps). Blinking The LAN port is sending/receiving data through the port. The LAN port is not connected. NWA1123 Series User’s Guide...
Page 185: Nwa1123-Acv2
Off for 1s) Green The NWA1123 is ready for use. Green The NWA1123’s wireless interface is activated. Green Slow Blinking (Blink for 3 The NWA1123 is searching for (discovering) the NCC. times, Off for 3s) Green NWA1123 Series User’s Guide...
Page 186: Nwa1123-Ac Hd
Slow Blinking (blink for 3 The NWA1123 is discovering the NCC. times, Off for 3s) Green Green The NWA1123 is ready for use, the NWA1123’s wireless interface is activated, and/or wireless clients are connected to the NWA1123. NWA1123 Series User’s Guide...
Page 187 Green Slow Blinking (blink for 1 The wireless LAN is disabled or fails. time, Off for 1s) Blue Slow Blinking (blink for 1 The NWA1123 is checking for an available 5GHz channel. time, Off for 1s) NWA1123 Series User’s Guide...
Page 188: The Web Configurator
Make sure your NWA1123 hardware is properly connected. See the Quick Start Guide. Make sure your computer’s IP address is in the same subnet as the NWA1123’s IP address. Browse to http://(NWA1123’s IP address). See Section 21.1 on page 182 for more information. The Login screen appears. NWA1123 Series User’s Guide...
Page 189: Navigating The Web Configurator
• C - Main Window 22.3.1 Title Bar The title bar provides some useful links that always appear over the screens below, regardless of how deep into the Web Configurator you navigate. Figure 120 Title Bar NWA1123 Series User’s Guide...
Page 190: Navigation Panel
The following sections introduce the NWA1123’s navigation panel menus and their screens. NWA1123 Series User’s Guide...
Page 191: Warning Messages
Configure the IP address for the NWA1123 Ethernet interface. VLAN Manage the Ethernet interface VLAN settings. 22.3.3 Warning Messages Warning messages, such as those resulting from misconfiguration, display in a pop up window. Figure 123 Warning Message NWA1123 Series User’s Guide...
Page 192: Dashboard
You can also collapse, refresh, and close individual widgets. Figure 124 Dashboard The following table describes the labels in this screen. Table 85 Dashboard LABEL DESCRIPTION AP Information MAC Address This field displays the MAC address of the NWA1123. NWA1123 Series User’s Guide...
Page 193 This field displays whether the NWA1123 can connect to the Zyxel Nebula Control Center Connectivity (NCC). Status Nebula Control This field displays whether the NWA1123 has been registered and can be managed by the Center NCC. Activation Status NWA1123 Series User’s Guide...
Page 194: Network
• The VLAN screen (Section 24.3 on page 196) configures the NWA1123’s VLAN settings. 24.2 IP Setting Use this screen to configure the IP address for your NWA1123. To access this screen, click Configuration > Network > IP Setting. NWA1123 Series User’s Guide...
Page 195 Enter service port number used by the proxy server. Authentication Select this option if the proxy server requires authentication before it grants access to the Internet. User Name Enter your proxy user name. Password Enter your proxy password. NWA1123 Series User’s Guide...
Page 196: Vlan
The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. Use this screen to configure the VLAN settings for your NWA1123. To access this screen, click Configuration > Network > VLAN. NWA1123 Series User’s Guide...
Page 197 Set whether the NWA1123 adds the VLAN ID to outbound traffic transmitted through its Tagged Ethernet port. Apply Click Apply to save your changes back to the NWA1123. Reset Click Reset to return the screen to its last-saved settings. NWA1123 Series User’s Guide...
Page 198: Troubleshooting
Make sure you understand the normal behavior of the LED. See Section 2.5 on page 21 Section 21.5 on page 183. Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. NWA1123 Series User’s Guide...
Page 199: Nwa1123 Access And Login
• If there is no DHCP server on your network, make sure your computer’s IP address is in the same subnet as the NWA1123. Reset the device to its factory defaults, and try to access the NWA1123 with the default IP address. See Section 25.6 on page 205. NWA1123 Series User’s Guide...
Page 200: Internet Access
I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. 25.4 Internet Access I cannot access the Internet. NWA1123 Series User’s Guide...
Page 201 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. NWA1123 Series User’s Guide...
Page 202: Wireless Connections
You must remove any spaces from the certificate’s filename before you can import the certificate. Any certificate that you want to import has to be in one of these file formats: • Binary X.509: This is an ITU-T recommendation that defines the formats for X.509 certificates. NWA1123 Series User’s Guide...
Page 203 See the CLI Reference Guide for how to determine if you need to recover the firmware and how to recover it. Wireless clients are not being load balanced among my APs. NWA1123 Series User’s Guide...
Page 204 How do I remove the NWA1123-AC PRO indoor AP from its mounting bracket? • Find the down arrow close to the Ethernet ports, then use a thin flat tool (for example, a flat screw driver) to lift up a clip beneath 5GHz LED. NWA1123 Series User’s Guide...
Page 205: Resetting The Nwa1123
Use the following procedure to reset the NWA1123 to its factory-default settings. This overwrites the settings in the startup-config.conf file with the settings in the system-default.conf file. Note: This procedure removes the current configuration. Make sure the Power LED is on and not blinking. NWA1123 Series User’s Guide...
Page 206: Getting More Troubleshooting Help
Release the RESET button, and wait for the NWA1123 to restart. You should be able to access the NWA1123 using the default settings. 25.7 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more troubleshooting suggestions. NWA1123 Series User’s Guide...
Page 207: Appendix A Importing Certificates
(not all browsers show the padlock in the same location). Internet Explorer The following example uses Microsoft Internet Explorer 7 on Windows XP Professional; however, they can also apply to Internet Explorer on Windows Vista. NWA1123 Series User’s Guide...
Page 208 If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Continue to this website (not recommended). In the Address Bar, click Certificate Error > View certificates. NWA1123 Series User’s Guide...
Page 209 Appendix A Importing Certificates In the Certificate dialog box, click Install Certificate. In the Certificate Import Wizard, click Next. NWA1123 Series User’s Guide...
Page 210 Next again and then go to step 9. Otherwise, select Place all certificates in the following store and then click Browse. In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK. NWA1123 Series User’s Guide...
Page 211 Appendix A Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. 10 If you are presented with another Security Warning, click Yes. 11 Finally, click OK when presented with the successful certificate installation message. NWA1123 Series User’s Guide...
Page 212 Double-click the public key certificate file. In the security warning dialog box, click Open. Refer to steps 4-12 in the Internet Explorer procedure beginning on page 207 to complete the installation process. NWA1123 Series User’s Guide...
Page 213 This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP. Open Internet Explorer and click Tools > Internet Options. In the Internet Options dialog box, click Content > Certificates. NWA1123 Series User’s Guide...
Page 214 In the Certificates confirmation, click Yes. In the Root Certificate Store dialog box, click Yes. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA1123 Series User’s Guide...
Page 215 The certificate is stored and you can now connect securely to the Web Configurator. A sealed padlock appears in the address bar, which you can click to open the Page Info > Security window to view the web page’s security information. NWA1123 Series User’s Guide...
Page 216 Rather than browsing to a Zyxel Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA1123 Series User’s Guide...
Page 217 The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the web page’s security information. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox 2. NWA1123 Series User’s Guide...
Page 218 Appendix A Importing Certificates Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA1123 Series User’s Guide...
Page 219 Delete. In the Delete Web Site Certificates dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA1123 Series User’s Guide...
Page 220: Appendix B Ipv6
54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. NWA1123 Series User’s Guide...
Page 221 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 90 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 NWA1123 Series User’s Guide...
Page 222 DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP. In IPv6, all network interfaces can be associated with several addresses. NWA1123 Series User’s Guide...
Page 223 2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the NWA1123 passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. NWA1123 Series User’s Guide...
Page 224 The Multicast Listener Discovery (MLD) protocol (defined in RFC 2710) is derived from IPv4's Internet Group Management Protocol version 2 (IGMPv2). MLD uses ICMPv6 message types, rather than IGMP message types. MLDv1 is equivalent to IGMPv2 and MLDv2 is equivalent to IGMPv3. NWA1123 Series User’s Guide...
Page 225 DHCPv6 client software on your Windows XP. (Note: If you use static IP addresses or Router Advertisement for IPv6 address assignment in your network, ignore this section.) This example uses Dibbler as the DHCPv6 client. To enable DHCPv6 client on your computer: NWA1123 Series User’s Guide...
Page 226 Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: NWA1123 Series User’s Guide...
Page 227 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 NWA1123 Series User’s Guide...
Page 228: Appendix C Customer Support
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • http://www.zyxel.cn India • Zyxel Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 229 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • Zyxel Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • Zyxel Deutschland GmbH • http://www.zyxel.de Belarus • Zyxel BY • http://www.zyxel.by...
Page 230 Appendix C Customer Support Belgium • Zyxel Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • http://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz Denmark • Zyxel Communications A/S • http://www.zyxel.dk Estonia • Zyxel Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 231 • Zyxel Communications Poland • http://www.zyxel.pl Romania • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • Zyxel Communications ES Ltd • http://www.zyxel.es Sweden • Zyxel Communications • http://www.zyxel.se Switzerland •...
Page 232 Appendix C Customer Support • http://www.zyxel.ch/ Turkey • Zyxel Turkey A.S. • http://www.zyxel.com.tr • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com Latin America Argentina • Zyxel Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • Zyxel Communications Brasil Ltda.
Page 233 Appendix C Customer Support North America • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NWA1123 Series User’s Guide...
Page 234: Appendix D Legal Information
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
Page 235 été approuvé par Industrie Canada pour fonctionner avec les types d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation de l'émetteur. NWA1123 Series User’s Guide...
Page 236 (iv) De plus, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de haute puissance sont désignés utilisateurs principaux (c.-à- d., qu’ils ont la priorité) pour les bandes 5250-5350 MHz et 5650-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. NWA1123 Series User’s Guide...
Page 237 ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ Zyxel ∆ΗΛΩΝΕΙ ΟΤΙ εξοπλισμός ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩ∆ΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ (Greek) ∆ΙΑΤΑΞΕΙΣ ΤΗΣ Ο∆ΗΓΙΑΣ 2014/53/EU. English Hereby, Zyxel declares that this device is in compliance with the essential requirements and other relevant provisions of Directive 2014/53/EU. NWA1123 Series User’s Guide...
Page 238 2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used (specified in dBi) to the output power available at the connector (specified in dBm). NWA1123 Series User’s Guide...
Page 239 Network standby power consumption < 8W, and/or Off mode power consumption < 0.5W, and/or Standby mode power consumption < 0.5W. For wireless setting, please refer to Chapter 8 on page 69 chapter for more detail. NWA1123 Series User’s Guide...
Page 240 電磁波曝露量 MPE 標準值 1mW/cm2，送測產品 (NWA1123-AC PRO) 實測值為：0.448 mW/cm2 本產品使用時建議應距離人體 20 cm 電磁波曝露量 MPE 標準值 1mW/cm2，送測產品 (NWA1123-AC HD) 實測值為：0.685 mW/cm2 本產品使用時建議應距離人體 20 cm 無線資訊傳輸設備忍受合法通信之干擾且不得干擾合法通信；如造成干擾，應立即停用，俟無干擾之虞，始得繼續使用。無線資訊傳設備的製造廠商應確保頻率穩定性，如依製造廠商使用手冊上所述正常操作，發射的信號應維持於操作頻帶中。無線資訊傳輸設備必須具備安全功能，以保護未經授權之一方任意更改軟體進而避免發射機操作於非經認證之頻率、輸出功率、調變形式或其他射頻參數設定。使用無線產品時，應避免影響附近雷達系統之操作。若使用高增益指向性天線，該產品僅應用於固定式點對點系統。安全警告為了您的安全，請先閱讀以下警告及指示 : • 請勿將此產品接近水、火焰或放置在高溫的環境。 • 避免設備接觸任何液體 - 切勿讓設備接觸水、雨水、高濕度、污水腐蝕性的液體或其他水份。 • 灰塵及污物 - 切勿接觸灰塵、污物、沙土、食物或其他不合適的材料。 NWA1123 Series User’s Guide...
Page 241 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. NWA1123 Series User’s Guide...
Page 242 You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or Zyxel Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or Zyxel Technical Support at support@zyxel.com.tw. NWA1123 Series User’s Guide...
Page 243: Index
Web Configurator Common Event Format (CEF) and certificates 154, 159 comparison table CA (Certificate Authority), see certificates configuration CEF (Common Event Format) 154, 159 information Certificate Authority (CA) configuration files see certificates NWA1123 Series User’s Guide...
Page 244 HTTPS dual radios vs HTTPS dual-radio application HTTPS dynamic channel selection and certificates authenticating clients avoiding warning messages example vs HTTP with Internet Explorer e-mail with Netscape Navigator daily statistics report encryption NWA1123 Series User’s Guide...
Page 245 MAC address range Java maintenance permissions management JavaScripts Management Information Base (MIB) management mode managing the device good habits 21, 183 using FTP. See FTP. key pairs MBSSID memory usage 45, 48 message bar 34, 191 messages NWA1123 Series User’s Guide...
Page 246 Public-Key Infrastructure (PKI) Service Set public-private key pairs Service Set Identifier see SSID shell scripts downloading editing how applied radio managing reboot 25, 179 syntax vs reset uploading Reference Guide, CLI shutdown 25, 180 registration vs reset product NWA1123 Series User’s Guide...
Page 247 26, 188 default lease time 85, 87 syslog 154, 159 default reauthentication time 85, 87 syslog servers, see also logs lease time limited-admin (type) system log, see logs lockout system name 44, 126 reauthentication time NWA1123 Series User’s Guide...
Page 248 WEP (Wired Equivalent Privacy) wireless channel wireless client Wireless Distribution System (WDS) wireless LAN Wireless network overview wireless network example wireless profile layer-2 isolation MAC filtering radio security SSID wireless repeater wireless security 14, 202 wireless station Wizard Setup NWA1123 Series User’s Guide...

ZyXEL Communications NWA1123 Series User Manual

Chapter 1 Introduction

Chapter 2 Standalone AP Mode

Chapter 4 Setup Wizard

Chapter 5 Dashboard

Chapter 6 Monitor

Chapter 7 Network

Chapter 8 Wireless

Chapter 9 User

Chapter 10 AP Profile

Chapter 11 WDS Profile

Chapter 12 Certificates

Chapter 14 Log and Report

Chapter 15 File Manager

Chapter 16 Diagnostics

Chapter 17 Leds

Chapter 18 Antenna Switch

Chapter 19 Reboot

Chapter 20 Shutdown

Chapter 21 Cloud Mode

Chapter 22 The Web Configurator

Chapter 23 Dashboard

Chapter 24 Network

Chapter 25 Troubleshooting

Appendix A Importing Certificates

Appendix B Ipv6

Appendix C Customer Support

Appendix D Legal Information

Quick Links

Troubleshooting

Need help?

Questions and answers

Related Manuals for ZyXEL Communications NWA1123 Series

Summary of Contents for ZyXEL Communications NWA1123 Series