Z-Com ZAC Series User Manual

Outdoor wireless cpe
Table of Contents

Advertisement

Quick Links

IEEE 802.11 b/g/n Outdoor Wireless CPE/
IEEE 802.11 a/n Outdoor Wireless CPE
User's Manual
Model name: ZAC-1023-2-9 / ZAC-1023-5-13
ZAC-501 / ZAC-502
ZWA-3070 / ZWA-3080
ZN-7200-2EI / ZN-7200-2AEI-L
V1.0
May 2014
P. 1

Advertisement

Table of Contents
loading

Summary of Contents for Z-Com ZAC Series

  • Page 1 IEEE 802.11 b/g/n Outdoor Wireless CPE/ IEEE 802.11 a/n Outdoor Wireless CPE User’s Manual Model name: ZAC-1023-2-9 / ZAC-1023-5-13 ZAC-501 / ZAC-502 ZWA-3070 / ZWA-3080 ZN-7200-2EI / ZN-7200-2AEI-L V1.0 May 2014 P. 1...
  • Page 2 Copyright Copyright © 2014 all rights reserved. No part of this publication may be reproduced, adapted, stored in a retrieval system, translated into any language, or transmitted in any form or by any means without the written permission of the supplier. About This Manual This user manual is intended to guide professional installer to install the IEEE 802.11n ZAC Access Point series and how to build the infrastructure centered on it.
  • Page 3 Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
  • Page 4 FCC Radiation Exposure Statement: This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. To avoid the possibility of exceeding radio frequency exposure limits, you shall beep a distance of at least 100cm between you and the antenna of the installed equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
  • Page 5 Warranty Hardware warranty is for one (1) year from date of shipment from Distributor warrants that hardware will conform to the current relevant published specifications and will be free from material defects in material and workmanship under normal use and service. IN NO EVENT SHALL DISTRIBUTOR BE LIABLE TO YOU OR ANY OTHER PARTY FOR ANY DIRECT, INDIRECT, GENERAL, SPECIAL, INCIDENTAL, CONSEQUENTIAL, EXEMPLARY OR OTHER DAMAGE RISING OUT OF THE USE OR INABILITY TO USE THE PRODUCT (INCLUDING,...
  • Page 6: Table Of Contents

    Content Chapter 1 Introduction ................... 10 Introduction ........................10 Key Features ........................10 Hardware Overview......................11 Front View ..........................11 Back View..........................11 Inside the Bottom Cover......................12 LED Indicators ........................12 Typical Management Scenario ..................13 Hardware Installation ..................... 14 Preparation before Installation ..................
  • Page 7 Configure the AC+Thin AP mode .................. 26 Chapter 3 Navigate the Web Configurator ............40 Virtual AC+Thin AP Mode ....................40 Status ............................40 View Basic Information ......................40 View Managed APs ....................... 40 View Wireless Users ......................41 View DHCP Client Table ......................41 Wireless Settings ........................
  • Page 8 Tools ............................66 Ping ............................66 Trace Route .......................... 67 Thin AP Mode ......................... 68 Information..........................68 Basic Settings ......................... 68 FAT AP Mode ........................70 Status ............................70 View Basic Information ......................70 View Association List ......................70 View Network Flow Statistics ....................71 View ARP Table ........................
  • Page 9 Captive Portal ........................94 WDS Settings........................96 Management ........................... 97 Password ..........................97 Upgrade Firmware ........................ 97 Backup/ Retrieve Settings ..................... 98 Restore Factory Default Settings ................... 98 Reboot ..........................99 Remote Management ......................99 SNMP Management ......................100 Certificate Settings ......................102 Tools ............................
  • Page 10: Chapter 1 Introduction

    Chapter 1 Introduction Introduction The ZAC Series Access Point is a multi-mode 2x2 Access Point embedded with a software-based virtual access controller (VAC) for centrally managing managed APs that eliminates the need for a separate hardware controller to manage the WLAN. ZN-7200-2EI operates at 2.4GHz band while ZN-7200-2AEI-L operates at 5GHz band.
  • Page 11: Hardware Overview

    Hardware Overview Front View Back View P. 11...
  • Page 12: Inside The Bottom Cover

    Inside the Bottom Cover LED Indicators COLOR STATUS DESCRIPTION Green The device is powered on The device is not receiving power Green The device has the Ethernet connection The device has no Ethernet connection Blinking Transmitting/receiving Ethernet packets WLAN Green The WLAN is active The WLAN is inactive Blinking...
  • Page 13: Typical Management Scenario

    Typical Management Scenario This section describes the typical management of ZAC Access Point. By default, it is set to thin AP mode (managed AP) which allows it to be managed by the ZAC Access Point in AC mode. The following figure illustrates a ZAC wireless network. When a thin AP mode joins a wired network, it will start to look for a ZAC Access Point in AC mode.
  • Page 14: Hardware Installation

    Hardware Installation This chapter describes safety precautions and product information you have to know and check before installing the ZAC Access Point. Preparation before Installation Professional Installation Required Please seek assistance from a professional installer who is well trained in the RF installation and knowledgeable in the local regulations.
  • Page 15: Installation Precautions

    Installation Precautions To keep the ZAC Access Point well while you are installing it, please read and follow these installation precautions. Users MUST use a proper and well-installed grounding and surge arrestor with the ZAC Access Point; otherwise, a random lightening could easily cause fatal damage to ZAC Access Point. EMD (Lightning) DAMAGE IS NOT COVERED UNDER WARRNTY.
  • Page 16: Pole Mounting Ring

    Pole Mounting Ring Ferrite Suppression Core 24VDC Power Cord & PoE Injector Warning:  Users MUST use the “Power cord & PoE Injector” shipped in the box with the IEEE 802.11n Wireless Access Point. Use of other options will likely cause damage to the IEEE 802.11n Wireless Access Point..
  • Page 17: Hardware Installation

    Hardware Installation Connect up The bottom of the ZAC Access Point is a movable cover. Grab the cover and pull it back harder to take it out as the figure shown below. Plug a standard Ethernet cable into the RJ45 port. Slide the cover back and press down the lock button to seal the bottom of the ZAC Access Point.
  • Page 18: Using The Grounding Wire

    Using the Grounding Wire The ZAC Access Point is equipped with a grounding wire. It is important that the Access Point, cables, and PoE Injector must be properly connected to earth ground during normal use against surges or ESD. 1. Remove the screw on the grounding point at the bottom of the ZAC Access Point. 2.
  • Page 19: Mount The Ap On A Pole

    3. Connect the grounding wire to earth ground. Mount the AP on a Pole Turn the ZAC Access Point over. Put the pole mounting ring through the middle hole of it. Note that you should unlock the pole mounting ring with a screw driver before putting it through the device as the following right picture shows.
  • Page 20: Power Up

    Power Up Connect power cord to the PoE injector as the following right picture shows. Connect the Ethernet cable that connects the Access Point to the “POE” port of the PoE injector as figured below. P. 20...
  • Page 21: Connect To The Access Point

    Connect the power plug to a power socket. The Access Point will be powered up immediately. Connect to the Access Point To be able to configure and manage the Access Point, please do the followings: Connect to the Access Point To be able to configure and manage the Access Point, please do the followings: Open the ferrite core by unsnapping the connector latches.
  • Page 22 Loop the cable around and through the core. This helps "lock" the core in place, and may be required in circumstances with severe interference. Close the core and snap the halves back together. Note: The ferrite is professionally installed and a shrink wrap has been put around the ferrite ...
  • Page 23 Connect the other end of Ethernet cable to a PC or a switch hub. The hardware installation is complete. P. 23...
  • Page 24: Chapter 2 Quick Setup Tutorial

    Chapter 2 Quick Setup Tutorial Access the Web Configurator The ZAC Access Point provides you with user-friendly Web-based management interface to easily manage the access point.  Configure the computer with a static IP address of 192.168.1.x, as the default IP address of the ZAC Access Point is 192.168.1.1.
  • Page 25  Enter the username (Default: admin) and password (Default: password) respectively and click “Login” to login the main page of the ZAC Access Point. Note: The username and password are case-sensitive, and the password should be no  more than 19 characters! P.
  • Page 26: Configure The Ac+Thin Ap Mode

    Configure the AC+Thin AP mode The ZAC Access Point provides 4 operation modes: “Thin AP”, “Virtual AC”, “Virtual AC+Thin AP ”, as well as “FAT AP”. The default mode is “Thin AP”. To allow the ZAC Access Point to manage the thin APs, you need to switch one of the ZAC Access Points to virtual controller mode first.
  • Page 27 For Virtual Controller + Thin AP mode, if you need to configure the wireless settings for the ZAC Access Point especially SSID and encryption method, go to Wireless Settings > Wireless Networks and click on #1 Wireless SSID for configuration. After the configuration is made, click Save to save the settings. A dialog message will pop up to remind you changes will also apply to other managed Thin APs.
  • Page 28 Firmware Upgrade for ZAC AP in AC mode To upgrade the firmware for the ZAC Access Point in controller mode when necessary, go to Management > Firmware Upload and from Upgrade AC Firmware, browse the firmware file where it is placed.
  • Page 29 Moving the mouse over MAC address of each managed AP will also display relevant RF information such as channel mode, current channel, antenna being used together with transmit output power. Chapter 5 Management Page 29...
  • Page 30 Manage Thin APs To configure and manage the managed APs: 1. Enter the web page of the ZAC Access Point in controller mode and go to Management > AP Management, the following screen shows up. The ZAC Access Point AP in Virtual AC+Thin AP mode on the list is highlighted in bold font. By selecting it and hitting Radio button, you may check radio setting such as channel bandwidth, channel, antenna and output power.
  • Page 31 Besides radio setting, you may also reboot the managed AP, change its IP address and perform firmware upgrade for managed AP. Firmware Upgrade for Managed Thin APs For firmware upgrade, you may choose to upgrade the selected managed AP by hitting Upgrade Selected, or do the group upgrade by hitting Upgrade All.
  • Page 32 Monitor Managed Thin APs To view each managed AP’s status, please go to Status > Managed APs. Besides viewing device information such as device name, MAC address, IP address, and FW version, you may also monitor the wireless clients that are currently associated with the managed APs as well as packets statistics. Configure the Fat AP mode Fat AP mode operates as standalone AP that cannot be managed by the ZAC Access Point.
  • Page 33 effect. The Fat AP covers “AP mode”, “Wireless Client mode”, “Bridge mode” as well as “AP Repeater mode”. For details please refer to the next Chapter. AP Mode 1. Choose Wireless > Basic Settings. The default is AP mode already. Here, you can change wireless SSID for your public end user.
  • Page 34 2. If security is required, open Wireless > Profile Setting and click on “Profile 1 Settings” as below. 3. You may configure the parameters like “Network Authentication” and “Data Encryption” for more secure network communication in your application. After the configuration is made, click Apply to save the parameters.
  • Page 35 Wireless Client Mode Go to Wireless > Basic Settings and choose “Wireless Client” from Wireless Mode. Specify the SSID that you would like connect and click Apply to save the configuration. Besides specifying the SSID manually, you may select the preferable Access Point to connect by clicking the “Site Survey”...
  • Page 36 3. If the AP you connect to require authentication or encryption keys, click Profile Settings in the left column, select the corresponding authentication and encryption options, and click “ Apply” to save configuration. 4. To check whether the association with the Access Point has been successfully made, go to Status > Connections.
  • Page 37 Bridge Mode 1. Go to Wireless > Basic Settings. Choose “Bridge” from Wireless Mode, check a clean channel and click Apply to save configuration. 2. Go to “WDS Settings” in “Wireless”, input the MAC address of the remote bridge to “Remote AP MAC Address 1”...
  • Page 38 3. Repeat the above procedures to configure the remote ZAC bridge. 4. Enter the actual distance in Space In Meter. For example, if the distance between the two ZAC bridges is 3 kilometers, enter 3000 in the field. Click Apply to save configuration. 5.
  • Page 39 To establish point-to-point bridge connection, please follow the procedures described in Bridge mode. To connect the wireless client to the AP, please follow the procedures described in Wireless Client mode. Chapter 5 Management Page 39...
  • Page 40: Chapter 3 Navigate The Web Configurator

    Chapter 3 Navigate the Web Configurator Virtual AC+Thin AP Mode Status View Basic Information Open “Information” in “Status” to check the basic information of the ZAC Access Point, which is read only. Information includes system information, IP settings, and wireless network setting. Click “Refresh”...
  • Page 41: View Wireless Users

    View Wireless Users Open “Wireless Users” in “Status” to check the information of all the wireless clients such as MAC address, SSID of the managed APs that are associated with, signal strength, connection up time, and uploaded/downloaded packets. All is read only. Click “Refresh” at the bottom to update the list. View DHCP Client Table Open “DHCP Clients”...
  • Page 42: Wireless Settings

    Wireless Settings Wireless Setting allows you to configure wireless parameters, security method, access control and flow control for your ZAC Access Point. Note that the configuration will also apply on all the other ZAC-managed APs. Wireless Networks (VAP Profiles Settings) The IEEE 802.11n ZAC Access Point allows up to 8 virtual SSIDs on a single BSSID and to configure different profile settings such as security and VLAN ID to each SSID.
  • Page 43  Basic Setting SSID: This wireless network name is shared among all associated devices in your wireless network. Keep it identical on all those devices. Note that the SSID is case-sensitive and cannot exceed 32 characters. Description: Name of the VAP profile Broadcast SSID: In AP mode, hiding network name is necessary when you are in a wireless environment that may have potential risk.
  • Page 44 802.11a/n ZAC Access Point provides you with rock solid security settings.  Network Authentication Open System: It allows any device to join the network without performing any security check. Shared Key: Data encryption and key are required for wireless authentication (Not available in Bridge/AP Repeater mode).
  • Page 45 If Radius relevant authentication type is selected, please go to Wireless  Radius  Settings for further radius server configuration. WPA-PSK: It is a simplified WPA mode with no need for specific authentication server. In this so-called WPA Pre-Shared Key, all you have to do is just pre-enter a key in each WLAN node and this is the common way to be adopted in large and middle enterprise as well as residential network.
  • Page 46: Wireless Protocols

     Network Basic Setting: Network Mode: Specify the network mode. It includes Bridge and Router. When switch to Router mode, the LAN IP address for web page access will become 192.168.0.99. Wireless Protocols Allow the user to change 802.11 mode and other advanced parameters for the ZAC Access Point. For the country region, FCC domain will support United States only.
  • Page 47  Basic Settings Country Region: The availability of some specific channels and/or operational frequency bands is country dependent. For FCC domain, the default country is United States only. 802.11 Mode: The IEEE 802.11n ZAC Access Point can communicate with wireless devices of 802.11b/g or 802.11b/g/n.
  • Page 48: Access Control

    RIFS: RIFS (Reduced Interframe Spacing) is a means of reducing overhead and thereby increasing network efficiency HT Protect: Enable HT (High Throughput) protect to ensure HT transmission with MAC mechanism. Under 802.11n mode, wireless client can be divided into HT STA and Non-HT STA, among which the one with HT protect enabled gets higher throughput.
  • Page 49: Traffic Shaping

    mode. Open “Access Control” in “Wireless Settings” as below. Wireless Network: Select the VAP network you would like to enable access control.   Access Control Mode If you select “Allow Listed”, only those clients whose wireless MAC addresses are in the access control list will be able to connect to your AP.
  • Page 50: Radius Settings

    Enable Traffic Shaping  Check this box to control the overall bandwidth for a specific VAP network. Interface Selection: Select the VAP network you would like to enable traffic shaping.  Outgoing Traffic Rate: To specify maximum outgoing bandwidth to a certain rate in kbit/s. ...
  • Page 51: Tcp/Ip Settings

     Authentication RADIUS Server This is for RADIUS authentication. It can communicate with RADIUS through IP Address, Port and Shared Secret. IP Address: Enter the IP address of the Radius Server; Port: Enter the port number of the Radius Server; Shared Secret: This secret, which is composed of no more than 31 characters, is shared by the IEEE 802.11n ZAC Access Point and RADIUS during authentication.
  • Page 52: Captive Portal

    LAN Settings:  IP Address: Specify the IP address for the ZAC-managed Access Point. Subnet Mask: Specify the Subnet mask for the ZAC-managed Access Point. DHCP Server: Select to enable or disable DHCP server on the ZAC-managed Access Point. DHCP IP Address Range: When the DHCP Server is enabled, users may specify DHCP IP Address Range for the ZAC-managed Access Point.
  • Page 53 To enable Captive Portal, check “Captive Portal” and select the VAP network needed for captive portal. Radius Settings  Primary Radius Server: Enter the name or IP address of the primary radius server Secondary Radius Server: Enter the name or IP address of the primary radius server if any. Radius Auth Port: Enter the port number for authentication Radius Acct Port: Enter the port number for billing Radius Shared Secret: Enter the secret key of the radius server...
  • Page 54: Firewall Settings

    Firewall Settings The firewall is a system or group of systems that enforce an access control policy between two networks. It may also be defined as a mechanism used to protect a trusted network from an un-trusted network. The IEEE 802.11n ZAC Access Point has capabilities of Source IP Filtering, Destination IP Filtering, Source Port Filtering, Destination Port Filtering, Port Forwarding as well as DMZ.
  • Page 55  Destination IP Filtering: You may create and activate a rule that filters a packet based on the destination IP address to restrict the local computers from accessing certain websites. Check “Enable Destination IP Filtering” to activate rule. Destination IP Address: Enter the IP address to be restricted. Comment: Make comments to record your filtering rule.
  • Page 56 Click Apply and the IP address will be added in the list. To delete the restricted source ports, click Select checkbox of the designated ports and click the Delete Selected button. You may delete all the IP addresses in the list by clicking Delete All. Destination Port Filtering: ...
  • Page 57: Management

     Port Forwarding: The port forwarding allows you to automatically redirect common network services to a specific machine behind the NAT firewall. These settings ne are only necessary if you wish to host some sort of server like a web server or mail server on the private local network behind IEEE 802.11n Wireless ZAC Access Point’s NAT firewall.
  • Page 58 Restart: Restart the selected ZAC-managed AP. Rename: Rename for the selected ZAC-managed AP. Set IP: Assign a static IP address for the selected ZAC-managed AP or obtain the IP address from ZAC Access Point in AC mode. Default is DHCP client. Radio: To display the current radio settings such as channel bandwidth, operating channel, antenna and output power for the selected ZAC-managed Access Point.
  • Page 59: System Settings

    Upgrade Selected: Upgrade firmware for the selected ZAC-managed AP. Note that you need to upload the firmware file into the ZAC Access Point in AC mode prior to firmware upgrade, otherwise a window will pop up saying TAP firmware hasn’t been uploaded. Upgrade All: Click to upgrade all the ZAC-managed APs simultaneously.
  • Page 60 between the access points but establish the redundant link as a backup if the initial link fails. STP Forward Delay: STP Forward Delay is the time spent in detecting and learning network tree topology state before entering the forward state. Default time value is 1 sec. ...
  • Page 61: Time Settings

    Time Settings Compliant with NTP, the IEEE 802.11n ZAC Access Point is capable of keeping its time in complete accord with the Internet time. To use this feature, check “Enable NTP Client Update” in advance.  Current Time Display the present time in Yr, Mon, Day, Hr, Min and Sec. ...
  • Page 62: Backup/ Retrieve Settings

    the firmware upgrade for ZAC-managed APs. Note: Do NOT cut the power off during upgrade, otherwise the system may crash!  Backup/ Retrieve Settings It is strongly recommended you back up configuration information in case of something unexpected. If tragedy hits your device, you may have an access to restore the important files by the backup. All these can be done by the local or remote computer.
  • Page 63: Reboot

     Restore factory default settings via Reset Button If software in ZAC Access Point is unexpectedly crashed and no longer reset the unit via Web, you may do hardware reset via the reset button. Press and hold the button for at least 5 seconds and then release it until the PWR LED gives a blink.
  • Page 64: Password Settings

    Password Settings You can change the password for your IEEE 802.11n ZAC Access Point.  Current Password: Enter the current password.  New Password: Enter the new password. Confirm Password: Enter the new password again for confirmation.  Note: The password is case-sensitive and its length cannot exceed 19 characters! ...
  • Page 65: System Log

    IP Address: Specify the IP address of the remote server. Port: Specify the port number of the remote server.  Send Syslog via Email Log Schedule: Configure the frequency of logs being sent. 5 scheduling options are provided: Never, Hourly, Daily, Weekly, and When log is full. Severity Level: Choose All to send all the logs or Alert to send only the alert messages.
  • Page 66: System Alert

    System Alert: System alert record and events occurred on both ZAC Access Point in AC mode and ZAC-managed AP in this page. Once the log entries are all used, the log will wrap around and the old logs will be deleted. You may click Clear to delete logs manually as well.
  • Page 67: Trace Route

     Ping Address Enter IP address of the remote destination.  Ping Count: Enter the number of pings. Packet Size:  Specify ping packet size. Trace Route This tool is used to discover the routes that packets take when traveling to the destination destination. Destination IP Address ...
  • Page 68: Thin Ap Mode

    Thin AP Mode Information You may see some ZAC-managed AP’s basic information such as model name, firmware version, MAC address, current up time, registration status as well as MAC address. Basic Settings Allows you to configure device and IP settings for the ZAC-managed AP. P.
  • Page 69  General Settings: Device Mode: Three modes are provided: AC+Thin AP, Thin AP, FAT AP. Select AC+Thin AP to have the device act as virtual access controller to manage other ZAC-managed APs on your network. Select “Thin AP” to have the ZAC Access Point managed by the ZAC AP in AC mode. Select FAT AP to perform as a standalone AP, neither managing nor managed by other ZAC APs.
  • Page 70: Fat Ap Mode

    FAT AP Mode Status View Basic Information Open “Information” in “Status” to check the basic information of the ZAC Access Point, which is read only. Information includes system information, LAN settings, wireless setting and interface status. Click “Refresh” at the bottom to have the real-time information. View Association List Open “Connections”...
  • Page 71: View Network Flow Statistics

    device name, connection time, signal strength, noise floor, ACK timeout, link quality, IP information, current data rate, current TX/RX packets. View Network Flow Statistics Open “Statistics” in “Status” to check the data packets received on and transmitted from the wireless and Ethernet ports.
  • Page 72: View Arp Table

    View ARP Table Open “ARP Table” in “Status” as below. Click “Refresh” to view current table. View Bridge Table Open “Bridge Table” in “Status” as below. Click “Refresh” to view current connected status.. View Active DHCP Client Table Open “DHCP Clients” in “Status” as below to check the assigned IP address, MAC address and time expired for each DHCP leased client.
  • Page 73: View Network Activities

    View Network Activities The network activities allows you to monitor the current Wireless and Ethernet TX/RX data traffic in graphical and numerical form on the Web of the Skyport. The chart scale and throughput dimension (Bps, Kbps, Mbps) changes dynamically according to the mean throughput value. Throughput statistics can be updated manually using the “Refresh”...
  • Page 74: System

    System Basic System Settings Device Settings  Device Mode: Three modes are provided: AC+Thin AP, Thin AP, FAT AP. Select AC+Thin AP to have the device act as virtual access controller to manage other ZAC-managed APs on your network. Select “Thin AP” to have the ZAC Access Point managed by the ZAC AP in AC mode. Select FAT AP to perform as a standalone AP, neither managing nor managed by other ZAC APs.
  • Page 75: Tcp/Ip Settings

    The GPS Coordinate Setting helps you mark the latitude and longitude of the ZAC Access Point. Just enter the coordinates and click the Apply button. TCP/IP Settings Open “TCP/IP Settings” in “System” as below to configure the parameters for LAN which connects to the LAN port of the ZAC Access Point.
  • Page 76 default gateway and DNS server for the ZAC ACCESS POINT manually. Make sure the specified IP address is unique on your network in order to prevent IP conflict. If the IEEE 802.11n ZAC Access Point is configured as Router mode, you need to configure some additional TCP/IP parameters for accessing the Internet.
  • Page 77: Time Settings

    is on wired port and LAN is on wireless port. Or, you can access device through the wireless device connected with the ZAC AP. In wireless client mode, users can access the ZAC Access Point via its wired port, for ...
  • Page 78: Radius Settings

    RADIUS Settings RADIUS (Remote Authentication Dial-In User Service) is a server for remote user authentication and accounting; playing a central role in the network in providing the capabilities of authenticating, authorizing, accounting, auditing, alarming and etc. It allows an organization to maintain user profiles in a central database that all remote servers can share.
  • Page 79: Firewall Settings

    Firewall Settings The firewall is a system or group of systems that enforce an access control policy between two networks. It may also be defined as a mechanism used to protect a trusted network from an un-trusted network. The IEEE 802.11n ZAC Access Point has capabilities of Source IP Filtering, Destination IP Filtering, Source Port Filtering, Destination Port Filtering, Port Forwarding as well as DMZ.
  • Page 80 You may create and activate a rule that filters a packet based on the destination IP address to restrict the local computers from accessing certain websites. Check “Enable Destination IP Filtering” to activate rule. Destination IP Address: Enter the IP address to be restricted. Comment: Make comments to record your filtering rule.
  • Page 81  Destination Port Filtering: You may create and activate a rule that filters a packet based on the destination port from your local network to Internet. Check “Enable Destination Port Filtering” to activate rule. Port Range: Enter the port range you would like to restrict. Protocol: Select port protocol: Both, TCP, UDP.
  • Page 82: Udp Pass Through

    activate port forwarding. IP Address: Enter the IP address the local server. Protocol: Select Both, UDP or TCP. Port Range: Specify the port range. Comment: Make comments to record the port forwarding rule. UDP Pass Through By check Enable UDP Pass through will allow all the UDPs packets to pass through the firewall. Note that opening all the UDP ports will be very likely to expose the network to intruders DMZ: A Demilitarized Zone is used to provide Internet services without sacrificing unauthorized access to its...
  • Page 83: Wireless

    Wireless Open “Basic Settings” in “Wireless” as below to make basic wireless configuration. Disable Wireless LAN Interface  Check this option to disable WLAN interface, then the wireless module of IEEE 802.11n ZAC Access Point will stop working and no wireless device can connect to it. Operation Mode ...
  • Page 84  Wireless Network Name (SSID) This wireless network name is shared among all associated devices in your wireless network. Keep it identical on all those devices. Note that the SSID is case-sensitive and can not exceed 32 characters. Broadcast SSID ...
  • Page 85: Vap Profile Settings

    automatically select the highest available rate to transmit. In some cases, however, like where there is no great demand for speed, you can have a relatively-low transmit rate for compromise of a long distance.  Extension Channel Protection Mode This is to avoid conflict with other wireless network and boost the ability of your device to catch all 802.11g transmissions.
  • Page 86 virtual AP, you may check the Enable box of the profile and click on the profile (eg. Profile 2) to configure wireless and security settings. Hit Apply to active the profile. Basic Setting  Profile Name: Name of the VAP profile Wireless Network Name: Enter the virtual SSID for the VAP Broadcast SSID: In AP mode, hiding network name is necessary when you are in a wireless environment that may have potential risk.
  • Page 87 transmission. Under the mode except wireless client mode, enable “Wireless Separation” can prevent the communication among associated wireless clients. WMM Support: WMM (Wi-Fi Multimedia) is a subset of 802.11e. It allows wireless communication to define a priority limit on the basis of data type under AP mode only, thus those time-sensitive data, like video/audio data, may own a higher priority than common one.
  • Page 88 Note: If Radius relevant authentication type is selected, please go to Wireless  Radius  Settings for further radius server configuration. WPA-PSK: It is a simplified WPA mode with no need for specific authentication server. In this so-called WPA Pre-Shared Key, all you have to do is just pre-enter a key in each WLAN node and this is the common way to be adopted in large and middle enterprise as well as residential network.
  • Page 89: Vlan

    VLAN If your network uses VLANs, you can assign one SSID to a VLAN, and client devices using the SSID are grouped in that VLAN. IEEE 802.11a/n ZAC Access Point, you need To allow users on the VLAN to access the WEB page of the to enable “Enable 802.1Q VLAN”...
  • Page 90 The data rate of your AP except wireless client mode could be enhanced greatly with this option enabled; however, if your wireless clients don’t support A-MPDU/A-MSDU aggregation, it is not recommended to enable it.  Short GI Under 802.11n mode, enable it to obtain better data rate if there is no negative compatibility issue. P.
  • Page 91  RTS Threshold The IEEE 802.11n ZAC Access Point sends RTS (Request to Send) frames to certain receiving station and negotiates the sending of a data frame. After receiving an RTS, that STA responds with a CTS (Clear to Send) frame to acknowledge the right to start transmission. The setting range is 0 to 2346 in byte.
  • Page 92: Access Control

     TDM Coordination Stands for “Time-Division Multiplexing Technique”, this resource reservation control mechanisms can avoid packet collisions and send the packets much more efficiently allowing for higher effective throughput rates. This function is only available in AP/CPE mode. It is highly recommended to enable TDM coordination when there are multiple CPEs needed to connect to the AP in your application.
  • Page 93: Traffic Shaping

    Profile Selection: Select the VAP network you would like to enable access control.   Access Control Mode If you select “Allow Listed”, only those clients whose wireless MAC addresses are in the access control list will be able to connect to your AP. While when “Deny Listed” is selected, those wireless clients on the list will not be able to connect the AP.
  • Page 94: Captive Portal

     Overall Traffic Shaping Check this box to control the overall bandwidth of the ZAC Access Point. Incoming Traffic Limit: To specify maximum incoming bandwidth to a certain rate in kbit/s. Incoming Traffic Burst: To specify the buffer size for incoming traffic that can be sent within a The suggested value is 20KBytes.
  • Page 95 To enable Captive Portal, check “Captive Portal” and select the VAP network needed for captive portal.  Radius Settings Primary Radius Server: Enter the name or IP address of the primary radius server Secondary Radius Server: Enter the name or IP address of the primary radius server if any. Radius Auth Port: Enter the port number for authentication Radius Acct Port: Enter the port number for billing Radius Shared Secret: Enter the secret key of the radius server...
  • Page 96: Wds Settings

    WDS Settings Extend the range of your network without having to use cables to link the Access Points by using the Wireless Distribution System (WDS): Simply put, you can link the Access Points wirelessly. Open “WDS Settings” in “Wireless” as below: Enter the MAC address of another AP you wirelessly want to connect to into the appropriate field and click “Apply”...
  • Page 97: Management

    Management Password From “Password Settings” in “Management”, you can change the password to manage your IEEE 802.11n ZAC Access Point. Current Password: Enter the current password.  New Password: Enter the new password.  Confirm Password: Enter the new password again for confirmation. ...
  • Page 98: Backup/ Retrieve Settings

    Note:  Do NOT cut the power off during upgrade, otherwise the system may crash! Backup/ Retrieve Settings It is strongly recommended you back up configuration information in case of something unexpected. If tragedy hits your device, you may have an access to restore the important files by the backup. All these can be done by the local or remote computer.
  • Page 99: Reboot

    Restore factory default settings via Reset Button  If software in IEEE 802.11n ZAC Access Point is unexpectedly crashed and no longer reset the unit via Web, you may do hardware reset via the reset button. Press and hold the button for at least 5 seconds and then release it until the PWR LED gives a blink.
  • Page 100: Snmp Management

    SNMP Management The IEEE 802.11n ZAC Access Point supports SNMP for convenient remote management. Open “SNMP Settings” in “Management” shown below. Set the SNMP parameters and obtain MIB file before remote management. Protocol Version: Select the SNMP version, and keep it identical on the IEEE 802.11n ZAC Access Point and the SNMP manager.
  • Page 101 Trap Destination: Specify the IP address of the station to send the SNMP traps to. Trap Community: Specify the password sent with each trap to the manager. By default, it is set to public and allows all requests.  Configure SNMPv3 User Profile For SNMP protocol version 3, you can click “Configure SNMPv3 User Profile”...
  • Page 102: Certificate Settings

    Certificate Settings Under Wireless Client mode, when EAP-TLS is used, the RADIUS server must know which user certificates to trust. The Server can trust all certificates issued by a given CA. To import a user certificate, from Import User Certificates, click “Browse” and specify the location where the user certificate is placed.
  • Page 103: Tools

    Tools System Log System log is used for recording events occurred on the IEEE 802.11n ZAC Access Point, including station connection, disconnection, system reboot and etc. Open “System Log” in “Tools” as below. Remote Syslog Server  Enable Remote Syslog: Enable System log to alert remote server. IP Address: Specify the IP address of the remote server.
  • Page 104  Ping Watchdog Enable Ping Watchdog: To activate ping watchdog, check this checkbox. IP Address to Ping: Specify the IP address of the remote unit to ping. Ping Interval: Specify the interval time to ping the remote unit. Startup Delay: Specify the startup delay time to prevent reboot before the IEEE 802.11n ZAC Access Point is fully initialized.
  • Page 105: Appendix A. Ascii

    Appendix A. ASCII WEP can be configured with a 64-bit, 128-bit or 152-bit Shared Key (hexadecimal number or ACSII). As defined, hexadecimal number is represented by 0-9, A-F or a-f; ACSII is represented by 0-9, A-F, a-f or punctuation. Each one consists of two-digit hexadecimal. Table 1 ACSII ASCII ASCII...
  • Page 106 P. 106...
  • Page 107: Appendix B. Specification

    Appendix B. Specification B-1 ZAC-1023-5-13 Features Additional Information Standard Compliance IEEE802.3u MDI / MDIX 10/100 Fast Ethernet IEEE802.11a/n wireless LAN interface IEEE 802.11n wireless LAN standard DDRII 64Mbyte Flash 16Mbyte Power input requirement Passive PoE 24V Pin 4,5 VDC+ Pin 7,8 VDC- Ethernet PHY 10/100 Mbps Antenna...
  • Page 108 Data modulation type DSSS/BPSK/QPSK/CCK/DQPSK/DBPSK 802.11a: OFDM 802.11n: OFDM FCC: 5.15GHz~5.25GHz ; 5.725GHz~5.85GHz RF frequency range NCC: 5.15GHz~5.25GHz ; 5.725GHz~5.85GHz CE: 5.15GHz~5.35GHz; 5.47GHz~5.725GHz Power Consumption (W) <12W Average Output Power @ 802.11a Date 5150~5725MHz 5725~5850MHz 25℃ (Single Chain) (± 2dBm) Rate/Frequency 6, 9, 12, 18, 23dBm 20 dBm...
  • Page 109 802.11an Date 5150~5725 5725~5850 At HT40 Rate/Frequency MCS0, MCS8 21dBm 20 dBm MCS1, MCS2, 21 dBm 20 dBm MCS3, MCS9, MCS10, MCS11 MCS4, MCS12 21 dBm 20 dBm MCS5, MCS13 21 dBm 20 dBm MCS6, MCS14 20 dBm 20 dBm MCS7, MCS15 19 dBm 19 dBm...
  • Page 110 B-2 ZAC-1023-2-9 Features Additional Information Standard Compliance IEEE802.3u MDI / MDIX 10/100 Fast Ethernet IEEE802.11b/g wireless LAN interface IEEE 802.11n wireless LAN standard DDRII 64Mbyte Flash 16Mbyte Power input requirement Passive PoE 24V Pin 4,5 VDC+ Pin 7,8 VDC- Ethernet PHY 10/100 Mbps Antenna Internal 9dBi directional antenna (Vertical, Horizontal)
  • Page 111 RF frequency range FCC: 2.412 GHz ~ 2.462 GHz NCC: 2.412 GHz ~ 2.462 GHz CE: 2.412 GHz ~ 2.472 GHz Power Consumption (W) <12W Average Output Power 1,5,11Mbps 27dB @ 25℃ 6, 9, 12, 18, 24Mbps 25dB (Single Chain) (± 2dBm) 36Mbps 24dB 48, 54Mbps...
  • Page 112 4/12 5/13 6/14 7/15 P. 112...

Table of Contents