Page 2
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system.
Table of Contents Table of Contents Contents Overview ..........................3 Table of Contents ..........................4 Part I: User’s Guide..................10 Chapter 1 Introduction ............................11 1.1 Overview ............................11 1.1.1 Management Mode ......................13 1.1.2 MBSSID ............................ 13 1.1.3 Dual-Radio ..........................14 1.1.4 Root AP ........................... 15 1.1.5 Repeater ..........................
Page 5
Table of Contents Chapter 3 Setup Wizard............................41 3.1 Accessing the Wizard ........................41 3.2 Using the Wizard ..........................41 3.2.1 Country Code ........................41 3.2.2 Time Zone ..........................42 3.2.3 Uplink ............................43 3.2.4 Radio ............................. 44 3.2.5 SSID ............................45 3.2.6 Summary ..........................
Page 6
Table of Contents 6.4 AC (AP Controller) Discovery ......................74 Chapter 7 Wireless ...............................76 7.1 Overview ............................76 7.1.1 What You Can Do in this Chapter ..................76 7.1.2 What You Need to Know ..................... 77 7.2 AP Management ..........................77 7.3 MON Mode .............................
Page 7
Table of Contents 10.1 Overview ............................. 115 10.1.1 What You Can Do in this Chapter ................... 115 10.2 MON Profile ..........................115 10.2.1 Add/Edit MON Profile ....................... 116 10.3 Technical Reference ........................117 Chapter 11 WDS Profile ............................119 11.1 Overview ............................. 119 11.1.1 What You Can Do in this Chapter ...................
Page 8
Table of Contents 13.5.1 How SSH Works ........................153 13.5.2 SSH Implementation on the NWA/WAC ................. 154 13.5.3 Requirements for Using SSH ....................155 13.5.4 Configuring SSH ......................... 155 13.5.5 Examples of Secure Telnet Using SSH ................155 13.6 Telnet ............................157 13.7 FTP ..............................
Page 9
Table of Contents 17.1 Overview ............................. 189 17.1.1 What You Can Do in this Chapter ................... 189 17.2 Suppression Screen ........................189 17.3 Locator Screen .......................... 190 Chapter 18 Antenna Switch ..........................192 18.1 Overview ............................. 192 18.1.1 What You Need To Know ....................192 18.2 Antenna Switch Screen ......................
H A P T E R Introduction 1.1 Overview This User’s Guide covers the following models: NWA1123-ACv2, NWA5121-N, NWA5121-NI, NWA5123-AC, NWA5123-NI, NWA5301-NJ, NWA1123-AC PRO, WAC5302D-S, WAC6502D-E, WAC6502D-S, WAC6503D-S, WAC6553D-E and WAC6103D-I. Your NWA/WAC is a wireless AP (Access Point). It extends the range of your existing wired network without additional wiring, providing easy network access to mobile users.
Page 12
Chapter 1 Introduction Table 1 NWA Series Comparison Table NWA1123- NWA5121- NWA5123- NWA5123- NWA5301- NWA1123- FEATURES NWA5121-N AC PRO 802.11r Fast Roaming Support in Managed AP Mode Maximum number of 512 event logs or 1024 debug logs log messages Table 2 WAC Series Comparison Table FEATURES WAC5302D-S WAC6502D-E...
Chapter 1 Introduction Your NWA/WAC’s business-class reliability, SMB features, and centralized wireless management make it ideally suited for advanced service delivery in mission-critical networks. It uses Multiple BSSID and VLAN to provide simultaneous independent virtual APs. Additionally, innovations in roaming technology and QoS features eliminate voice call disruptions.
Chapter 1 Introduction To the wireless clients in the network, each SSID appears to be a different access point. As in any wireless network, clients can associate only with the SSIDs for which they have the correct security settings. For example, you might want to set up a wireless network in your office where Internet telephony (VoIP) users have priority.
Chapter 1 Introduction Figure 2 Dual-Radio Application 1.1.4 Root AP In Root AP mode, the NWA/WAC (Z) can act as the root AP in a wireless network and also allow repeaters (X and Y) to extend the range of its wireless network at the same time. In the figure below, both clients A, B and C can access the wired network through the root AP.
Chapter 1 Introduction On the NWA/WAC in Root AP mode, you can have multiple SSIDs active for regular wireless connections and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either SSID to associate with the NWA/WAC in Root AP mode. A repeater must use the repeater SSID to connect to the NWA/WAC in Root AP mode.
Chapter 1 Introduction Once the security settings of peer sides match one another, the connection between devices is made. At the time of writing, repeater security is compatible with the NWA/WAC only. 1.2 Ways to Manage the NWA/WAC You can use the following ways to manage the NWA/WAC. Web Configurator The Web Configurator allows easy NWA/WAC setup and management using an Internet browser.
Chapter 1 Introduction 1.5 NWA5301-NJ Hardware 1.5.1 110 Punch-Down Block This section shows you how to use a punch-down tool to seat an 8-wire Ethernet cable to the 110 punch- down block. You can connect a PoE switch to the 110 punch-down block to provide power and Internet access to the NWA through this connection.
Chapter 1 Introduction Trim any excess wires. Place the dust caps over the terminated wires. 1.5.2 Phone Port Connect a digital telephone to the RJ-45 PHONE port at the bottom of the NWA to forward voice traffic to/from the telephone switchboard that is connected to the RJ-45 PHONE port on the back of the NWA. The NWA does not support VoIP (Voice over Internet Protocol) and the PHONE port is NOT for making calls over the regular networking network (PSTN), either.
Chapter 1 Introduction For local management, you can use a computer with terminal emulation software configured to the following parameters: • VT100 terminal emulation • 115200 bps • No parity, 8 data bits, 1 stop bit • No flow control The following table shows you the wire color codes and pin assignment for the console cable.
Chapter 1 Introduction 1.6.1 WAC6502D-E, WAC6502D-S, and WAC6503D-S The LEDs will stay ON when the WAC6500 Series is ready. You can change this setting in the Maintenance > LEDs > Suppression screen. Figure 5 WAC6500 Series LEDs The following table describes the LEDs. Table 6 WAC6500 Series LEDs COLOR STATUS...
Chapter 1 Introduction Table 6 WAC6500 Series LEDs (continued) COLOR STATUS DESCRIPTION Management Green The WAC AP is managed by a controller. Slow Blinking (blink for 3 The WAC AP is searching (discovery) for a controller. times, Off for 3s) The WAC AP is in standalone mode.
Page 23
Chapter 1 Introduction The following table describes the LEDs. Table 7 NWA1123-AC PRO and WAC6103D-I LEDs COLOR STATUS DESCRIPTION PWR/SYS Slow Blinking (On for 1s, The NWA/WAC is booting up. Off for 1s) Green The NWA/WAC is ready for use. Green There is system error and the NWA/WAC cannot boot up, or the NWA/WAC suffered a system failure.
Chapter 1 Introduction Table 7 NWA1123-AC PRO and WAC6103D-I LEDs (continued) COLOR STATUS DESCRIPTION Locator White Blinking The Locator is activated and will show the actual location of the NWA/WAC between several devices in the network. The Locator function is off. 1.6.3 NWA5301-NJ The LEDs automatically turn off when the NWA5301-NJ is ready.
Chapter 1 Introduction Table 8 NWA5301-NJ LEDs (continued) LABEL COLOR STATUS DESCRIPTION WLAN Green The WLAN is active. The WLAN is not active. UPLINK Green The port is connected. Blinking The NWA is sending/receiving data through the port. The port is not connected. LAN1-3 Green The port is connected.
Chapter 1 Introduction Table 9 NWA1123/5120 Series LED (continued) COLOR STATUS DESCRIPTION Amber The NWA is ready for use. Green Amber The NWA’s wireless interface is activated. Green Amber Slow Blinking (blink for 3 The NWA is discovering an AP controller. times, Off for 3s) Green Amber...
Chapter 1 Introduction The following table describes the LEDs. Table 10 WAC5302D-S LEDs COLOR STATUS DESCRIPTION PWR/SYS Slow Blinking (On for 1s, The WAC is booting up. Off for 1s) Green The WAC is ready for use. Green There is system error and the WAC cannot boot up, or the WAC suffered a system failure.
Page 28
Chapter 1 Introduction Always use Maintenance > Shutdown or the shutdown command before you turn off the NWA/WAC or remove the power. Not doing so can cause the firmware to become corrupt. Table 11 Starting and Stopping the NWA/WAC METHOD DESCRIPTION Turning on the power A cold start occurs when you turn on the power to the NWA/WAC.
H A P T E R The Web Configurator 2.1 Overview The NWA/WAC Web Configurator allows easy management using an Internet browser. Browsers supported are: • Firefox 36.0.1 or later • Chrome 41.0 or later • IE 10 or later The recommended screen resolution is 1024 x 768 pixels and higher.
Chapter 2 The Web Configurator Click Login. If you logged in using the default user name and password, the Update Admin Info screen appears. Otherwise, the dashboard appears. The Update Admin Info screen appears every time you log in using the default user name and default password.
Chapter 2 The Web Configurator Figure 10 The Web Configurator’s Main Screen The Web Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation Panel • C - Main Window 2.3.1 Title Bar The title bar provides some useful links that always appear over the screens below, regardless of how deep into the Web Configurator you navigate.
Page 32
Chapter 2 The Web Configurator Table 12 Title Bar: Web Configurator Icons (continued) LABEL DESCRIPTION Site Map Click this to see an overview of links to the Web Configurator screens. Object Click this to open a screen where you can check which configuration items reference an Reference object.
Page 33
Chapter 2 The Web Configurator Figure 13 Site Map Object Reference Click Object Reference to open the Object Reference screen. Select the type of object and the individual object and click Refresh to show which configuration settings reference the object. Figure 14 Object Reference NWA / WAC Series User’s Guide...
Chapter 2 The Web Configurator The fields vary with the type of object. The following table describes labels that can appear in this screen. Table 14 Object References LABEL DESCRIPTION Object Name This identifies the object for which the configuration settings that use it are displayed. Click the object’s name to display the object’s configuration screen in the main window.
Page 35
Chapter 2 The Web Configurator Figure 16 Navigation Panel Dashboard The dashboard displays general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs. For details on the Dashboard’s features, see Chapter 4 on page Monitor Menu The monitor menu screens display status and statistics information.
Page 36
Chapter 2 The Web Configurator Configuration Menu Use the configuration menu screens to configure the NWA/WAC’s features. Table 16 Configuration Menu Screens Summary FOLDER OR LINK FUNCTION Network IP Setting Configure the IP address for the NWA/WAC Ethernet interface. VLAN Manage the Ethernet interface VLAN settings.
Chapter 2 The Web Configurator Maintenance Menu Use the maintenance menu screens to manage configuration and firmware files, run diagnostics, and reboot or shut down the NWA/WAC. Table 17 Maintenance Menu Screens Summary FOLDER OR LINK FUNCTION File Manager Configuration File Manage and upload configuration files for the NWA/WAC.
Page 38
Chapter 2 The Web Configurator Click a column heading to sort the table’s entries according to that column’s criteria. Click the down arrow next to a column heading for more options about how to display the entries. The options available vary depending on the type of fields in the column. Here are some examples of what you can do: •...
Page 39
Chapter 2 The Web Configurator Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time.
Page 40
Chapter 2 The Web Configurator Table 19 Common Table Icons (continued) LABEL DESCRIPTION Remove To remove an entry, select it and click Remove. The NWA/WAC confirms you want to remove it before doing so. Activate To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate.
H A P T E R Setup Wizard 3.1 Accessing the Wizard When you log into the Web Configurator for the first time or when you reset the NWA/WAC to its default configuration, the wizard screen displays. Note: If you have already configured the wizard screens and want to open it again, click the Wizard icon on the upper right corner of any Web Configurator screen.
Chapter 3 Setup Wizard Figure 19 Wizard: Country Code 3.2.2 Time Zone Use this screen to configure the NWA/WAC’s time zone and daylight saving time. • Time Zone: Select the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT).
Chapter 3 Setup Wizard Figure 20 Wizard: TimeZone 3.2.3 Uplink Use this screen to configure the NWA/WAC’s IP address. Uplink Connection: Select Auto (DHCP) if the NWA/WAC is connected to a router with the DHCP server enabled. You then need to check the router for the IP address assigned to the NWA/WAC in order to access the NWA/WAC’s web configurator again.
Chapter 3 Setup Wizard Figure 21 Wizard: Uplink 3.2.4 Radio Use this screen to configure the NWA/WAC’s radio transmitter(s). • Channel Selection: Select Auto to have the NWA/WAC automatically choose a radio channel that has least interference. Otherwise, select Manual and specify a channel the NWA/WAC will use in the 2.4GHz or 5GHz wireless LAN.
Chapter 3 Setup Wizard Figure 22 Wizard: Radio 3.2.5 SSID Use this screen to enable, disable or edit an SSID profile. Select an SSID profile and click the Activate icon to turn it on or click the Inactivate icon to turn it off. To change an SSID profile’s settings, such as the SSID (Wi-Fi network name) and Wi-Fi password, select the SSID profile from the list and click the Edit icon.
Page 46
Chapter 3 Setup Wizard 3.2.5.1 Edit SSID Profile Use this screen to configure an SSID profile. The screen varies depending on the security type you selected. • SSID - Enter a descriptive name of up to 32 printable characters for the wireless LAN. •...
Chapter 3 Setup Wizard Figure 25 Wizard: SSID: Edit (802.1x) 3.2.6 Summary Use this screen to check whether what you have configured is correct. Click Save to apply your settings and complete the wizard setup. Otherwise, click Prev to return to the previous screen or click Cancel to close the wizard without saving.
H A P T E R Dashboard 4.1 Overview Use the Dashboard screens to check status information about the NWA/WAC. 4.1.1 What You Can Do in this Chapter • The main Dashboard screen (Section 4.2 on page 49) displays the NWA/WAC’s general device information, system status, system resource usage, and interface status.
Page 50
Chapter 4 Dashboard Figure 27 Dashboard The following table describes the labels in this screen. Table 20 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link to re-open closed widgets. Widgets that are already open appear grayed out. Refresh Time Setting Set the interval for refreshing the information displayed in the widget.
Page 51
Chapter 4 Dashboard Table 20 Dashboard (continued) LABEL DESCRIPTION Last Firmware This field displays the date and time when the last firmware update was made. Upgrade Timestamp System Resources CPU Usage This field displays what percentage of the NWA/WAC’s processing capability is currently being used.
Page 52
Chapter 4 Dashboard Table 20 Dashboard (continued) LABEL DESCRIPTION Boot Status This field displays details about the NWA/WAC’s startup state. OK - The NWA/WAC started up successfully. Firmware update OK - A firmware update was successful. Problematic configuration after firmware update - The application of the configuration failed after a firmware upgrade.
Chapter 4 Dashboard Table 20 Dashboard (continued) LABEL DESCRIPTION WLAN Interface This displays status information for the WLAN interface. Status Summary Status This displays whether or not the WLAN interface is activated. MAC Address This displays the MAC address of the radio. Radio This indicates the radio number on the NWA/WAC.
Chapter 4 Dashboard The following table describes the labels in this screen. Table 21 Dashboard > CPU Usage LABEL DESCRIPTION The y-axis represents the percentage of CPU usage. time The x-axis shows the time period over which the CPU usage occurred Refresh Interval Enter how often you want this window to be automatically updated.
H A P T E R Monitor 5.1 Overview Use the Monitor screens to check status and statistics information. 5.1.1 What You Can Do in this Chapter • The Network Status screen (Section 5.3 on page 56) displays general LAN interface information and packet statistics.
Chapter 5 Monitor 5.3 Network Status Use this screen to look at general Ethernet interface information and packet statistics. To access this screen, click Monitor > Network Status. Figure 30 Monitor > Network Status The following table describes the labels in this screen. Table 23 Monitor >...
Chapter 5 Monitor Table 23 Monitor > Network Status (continued) LABEL DESCRIPTION Status This field displays the current status of the physical port. Down - The physical port is not connected. Speed / Duplex - The physical port is connected. This field displays the port speed and duplex setting (Full or Half).
Chapter 5 Monitor The following table describes the labels in this screen. Table 24 Monitor > Wireless > AP Information > Radio List LABEL DESCRIPTION More Information Click this to view additional information about the selected radio’s wireless traffic and station count.
Page 59
Chapter 5 Monitor Figure 32 Monitor > Wireless > AP Information > Radio List > More Information NWA / WAC Series User’s Guide...
Chapter 5 Monitor The following table describes the labels in this screen. Table 25 Monitor > Wireless > AP Information > Radio List > More Information LABEL DESCRIPTION SSID Detail This list shows information about all the wireless clients that have connected to the specified radio over the preceding 24 hours.
Chapter 5 Monitor Table 26 Monitor > Wireless > Station Info (continued) LABEL DESCRIPTION MAC Address This is the station’s MAC address. Radio This is the radio number on the NWA/WAC to which the station is connected. SSID Name This indicates the name of the wireless network to which the station is connected. A single AP can have multiple SSIDs or networks.
Chapter 5 Monitor The following table describes the labels in this screen. Table 27 Monitor > Wireless > WDS Link Info LABEL DESCRIPTION WDS Uplink Info Uplink refers to the WDS link from the repeaters to the root AP. WDS Downlink Downlink refers to the WDS link from the root AP to the repeaters.
Chapter 5 Monitor Figure 35 Monitor > Wireless > Detected Device The following table describes the labels in this screen. Table 28 Monitor > Wireless > Detected Device LABEL DESCRIPTION Mark as Rogue Click this button to mark the selected AP as a rogue AP. A rogue AP can be contained in the Configuration >...
Page 64
Chapter 5 Monitor To access this screen, click Monitor > Log. The log is displayed in the following screen. Note: When a log reaches the maximum number of log messages, new log messages automatically overwrite existing log messages, starting with the oldest existing log message first.
Page 65
Chapter 5 Monitor The following table describes the labels in this screen. Table 29 Monitor > Log > View Log LABEL DESCRIPTION Show Filter / Hide Click this button to show or hide the filter settings. Filter If the filter settings are hidden, the Display, Email Log Now, Refresh, and Clear Log fields are available.
Page 66
Chapter 5 Monitor Table 29 Monitor > Log > View Log (continued) LABEL DESCRIPTION Protocol This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. The Web Configurator saves the filter settings if you leave the View Log screen and return to it later.
H A P T E R Network 6.1 Overview This chapter describes how you can configure the management IP address and VLAN settings of your NWA/WAC. The Internet Protocol (IP) address identifies a device on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 68
Chapter 6 Network Figure 38 CAPWAP Network Example Note: The NWA/WAC can be a standalone AP (default), or a CAPWAP managed AP. CAPWAP Discovery and Management The link between CAPWAP-enabled access points proceeds as follows: An AP in managed AP mode joins a wired network (receives a dynamic IP address). The AP sends out a discovery request, looking for a CAPWAP AP controller.
Chapter 6 Network • Get the controller’s IP address from a DNS server SRV (Service) record. • Broadcasting to discover the controller within the broadcast domain. Note: The AP controller needs to have a static IP address. If it is a DHCP client, set the DHCP server to reserve an IP address for the AP controller.
Chapter 6 Network • The AC (AP Controller) Discovery screen (Section 6.3 on page 71) configures the NWA/WAC’s AP Controller settings. 6.2 IP Setting Use this screen to configure the IP address for your NWA/WAC. To access this screen, click Configuration >...
Chapter 6 Network Table 30 Configuration > Network > IP Setting (continued) LABEL DESCRIPTION Subnet Mask Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers in the network. Gateway Enter the IP address of the gateway.
Page 72
Chapter 6 Network Figure 41 Management VLAN Setup In the figure above, to access and manage the NWA/WAC from computer A, the NWA/WAC and switch B’s ports to which computer A and the NWA/WAC are connected should be in the same VLAN. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks.
Page 73
Chapter 6 Network Figure 42 Configuration > Network > VLAN Each field is described in the following table. Table 31 Configuration > Network > VLAN LABEL DESCRIPTION VLAN Settings Management Enter a VLAN ID for the NWA/WAC. VLAN ID As Native VLAN Select this option to treat this VLAN ID as a VLAN created on the NWA/WAC and not one assigned to it from outside the network.
Chapter 6 Network Table 31 Configuration > Network > VLAN (continued) LABEL DESCRIPTION Edit Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings. In some tables you can just click a table entry and edit it directly in the table.
Page 75
Chapter 6 Network Figure 43 Configuration > Network > AC Discovery Each field is described in the following table. Table 32 Configuration > Network > AC Discovery LABEL DESCRIPTION Discovery Setting Auto Select this option to use DHCP option 138/DNS SRV record/Broadcast to get the AP controller’s IP address.
H A P T E R Wireless 7.1 Overview This chapter discusses how to configure the wireless network settings in your NWA/WAC. The following figure provides an example of a wireless network. Figure 44 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients.
Chapter 7 Wireless 7.1.2 What You Need to Know The following terms and concepts may help as you read this chapter. Station / Wireless Client A station or wireless client is any wireless-capable device that can connect to an AP using a wireless signal.
Page 78
Chapter 7 Wireless Figure 45 Configuration > Wireless > AP Management NWA / WAC Series User’s Guide...
Page 79
Chapter 7 Wireless Each field is described in the following table. Table 33 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the check box to enable the NWA/WAC’s first (default) radio. Radio 1 OP Mode Select the operating mode for radio 1.
Chapter 7 Wireless Table 33 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Radio 2 OP Mode This displays if the NWA/WAC has a second radio. Select the operating mode for radio 2. AP Mode means the radio can receive connections from wireless clients and pass their data traffic through to the NWA/WAC to be managed (or subsequently passed on to an upstream gateway for managing).
Chapter 7 Wireless Figure 46 Configuration > Wireless > MON Mode Each field is described in the following table. Table 34 Configuration > Wireless > MON Mode LABEL DESCRIPTION Rogue/Friendly AP List Click this button to add an AP to the list and assign it either friendly or rogue status. Edit Select an AP in the list to edit and reassign its status.
Chapter 7 Wireless Figure 47 Configuration > Wireless > MON Mode > Add/Edit Rogue/Friendly AP List Each field is described in the following table. Table 35 Configuration > Wireless > MON Mode > Add/Edit Rogue/Friendly AP List LABEL DESCRIPTION Enter the MAC address of the AP you want to add to the list. A MAC address is a unique hardware identifier in the following hexadecimal format: xx:xx:xx:xx:xx:xx where xx is a hexadecimal number separated by colons.
Page 83
Chapter 7 Wireless Each field is described in the following table. Table 36 Configuration > Wireless > Load Balancing LABEL DESCRIPTION Enable Load Select this to enable load balancing on the NWA/WAC. Balancing Use this section to configure wireless network traffic load balancing between the managd APs in this group.
Chapter 7 Wireless 7.4.1 Disassociating and Delaying Connections When your AP becomes overloaded, there are two basic responses it can take. The first one is to “delay” a client connection. This means that the AP withholds the connection until the data transfer throughput is lowered or the client connection is picked up by another AP.
Chapter 7 Wireless Connections are kicked based on either idle timeout or signal strength. The NWA/WAC first looks to see which devices have been idle the longest, then starts kicking them in order of highest idle time. If no connections are idle, the next criteria the NWA/WAC analyzes is signal strength. Devices with the weakest signal strength are kicked first.
Page 86
Chapter 7 Wireless Figure 52 An Example Three-Channel Deployment Three channels are situated in such a way as to create almost no interference with one another if used exclusively: 1, 6 and 11. When an AP broadcasts on any of these three channels, it should not interfere with neighboring APs as long as they are also limited to same trio.
Page 87
Chapter 7 Wireless available bandwidth to the point where each connecting device receives a meager trickle, the load balanced AP instead limits the incoming connections as a means to maintain bandwidth integrity. There are three kinds of wireless load balancing available on the NWA/WAC: Load balancing by station number limits the number of devices allowed to connect to your AP.
H A P T E R User 8.1 Overview This chapter describes how to set up user accounts and user settings for the NWA/WAC. 8.1.1 What You Can Do in this Chapter • The User screen (see Section 8.2 on page 89) provides a summary of all user accounts.
Chapter 8 User 8.2 User Summary The User screen provides a summary of all user accounts. To access this screen click Configuration > Object > User. Figure 55 Configuration > Object > User The following table describes the labels in this screen. Table 39 Configuration >...
Page 90
Chapter 8 User • Alphanumeric A-z 0-9 (there is no unicode support) • _ [underscores] • - [dashes] The first character must be alphabetical (A-Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user 'bob' but use 'BOB' when connecting via CIFS or FTP, it will use the account settings used for 'BOB' not ‘bob’.
Chapter 8 User The following table describes the labels in this screen. Table 40 Configuration > User > User > Add/Edit A User LABEL DESCRIPTION User Name Type the user name for this user account. You may use 1-31 alphanumeric characters, underscores( ), or dashes (-), but the first character cannot be a number.
Page 92
Chapter 8 User Figure 57 Configuration > Object > User > Setting The following table describes the labels in this screen. Table 41 Configuration > Object > User > Setting LABEL DESCRIPTION User Default Setting Default Authentication These authentication timeout settings are used by default when you create a new Timeout Settings user account.
Chapter 8 User Table 41 Configuration > Object > User > Setting (continued) LABEL DESCRIPTION User Logon Settings Limit the number of Select this check box if you want to set a limit on the number of simultaneous logins simultaneous logons for by admin users.
Page 94
Chapter 8 User The following table describes the labels in this screen. Table 42 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User Type This read-only field identifies the type of user account for which you are configuring the default settings.
H A P T E R AP Profile 9.1 Overview This chapter shows you how to configure preset profiles for the NWA/WAC. 9.1.1 What You Can Do in this Chapter • The Radio screen (Section 9.2 on page 96) creates radio configurations that can be used by the APs. •...
Chapter 9 AP Profile WEP (Wired Equivalent Privacy) encryption scrambles all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications private. Both the wireless stations and the access points must use the same WEP key for data encryption and decryption. WPA2 WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption, authentication and key management than WPA.
Chapter 9 AP Profile Table 43 Configuration > Object > AP Profile > Radio (continued) LABEL DESCRIPTION Object Click this to view which other objects are linked to the selected radio profile. Reference This field is a sequential value, and it is not associated with a specific user. Status This field shows whether or not the entry is activated.
Page 98
Chapter 9 AP Profile Figure 60 Configuration > Object > AP Profile > Add/Edit Profile The following table describes the labels in this screen. Table 44 Configuration > Object > AP Profile > Add/Edit Profile LABEL DESCRIPTION Hide / Show Click this to hide or show the Advanced Settings in this window.
Page 99
Chapter 9 AP Profile Table 44 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION 802.11 Band Select the wireless band which this radio profile should use. Not all NWA/WACs support both 2.4 GHz and 5 GHz frequency bands. 2.4 GHz is the frequency used by IEEE 802.11b/g/n wireless clients.
Page 100
Chapter 9 AP Profile Table 44 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION 2.4 GHz Channel This is available when the 2.4 GHz Channel Selection Method is set to auto. Deployment Select Three-Channel Deployment to limit channel switching to channels 1,6, and 11, the three channels that are sufficiently attenuated to have almost no impact on one another.
Page 101
Chapter 9 AP Profile Table 44 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION Enable A-MPDU Select this to enable A-MPDU aggregation. This field is not available if you set 802.11 Band Aggregation to 11a or 11b/g. Message Protocol Data Unit (MPDU) aggregation collects Ethernet frames along with their 802.11n headers and wraps them in a 802.11n MAC header.
Chapter 9 AP Profile Table 44 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION Transmission Specify how the NWA/WAC handles wireless multicast traffic. Mode Select Multicast to Unicast to broadcast wireless multicast traffic to all of the wireless clients as unicast traffic.
Chapter 9 AP Profile The following table describes the labels in this screen. Table 45 Configuration > Object > AP Profile > SSID List LABEL DESCRIPTION Click this to add a new SSID profile. Edit Click this to edit the selected SSID profile. Remove Click this to remove the selected SSID profile.
Page 104
Chapter 9 AP Profile The following table describes the labels in this screen. Table 46 Configuration > Object > AP Profile > Add/Edit SSID Profile LABEL DESCRIPTION Create new Select an object type from the list to create a new one associated with this SSID profile. Object Profile Name Enter up to 31 alphanumeric characters for the profile name.
Chapter 9 AP Profile Table 46 Configuration > Object > AP Profile > Add/Edit SSID Profile (continued) LABEL DESCRIPTION Uplink Define the maximum outgoing transmission data rate (either in mbps or kbps) on a perstation basis. VLAN ID Enter a VLAN ID for the NWA/WAC to use to tag traffic originating from this SSID. Hidden SSID Select this if you want to “hide”...
Chapter 9 AP Profile Table 47 Configuration > Object > AP Profile > SSID > Security List (continued) LABEL DESCRIPTION Remove Click this to remove the selected security profile. Object Click this to view which other objects are linked to the selected security profile (for example, Reference SSID profile).
Page 107
Chapter 9 AP Profile Figure 64 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile NWA / WAC Series User’s Guide...
Page 108
Chapter 9 AP Profile The following table describes the labels in this screen. Table 48 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes.
Page 109
Chapter 9 AP Profile Table 48 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile (continued) LABEL DESCRIPTION Key Length Select the bit-length of the encryption key to be used in WEP connections. If you select WEP-64: •...
Chapter 9 AP Profile 9.5 MAC Filter List This screen allows you to create and manage security configurations that can be used by your SSIDs. To access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List. Note: You can have a maximum of 32 MAC filtering profiles on the NWA/WAC.
Chapter 9 AP Profile Figure 66 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile The following table describes the labels in this screen. Table 50 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile LABEL DESCRIPTION Profile Name...
Page 112
Chapter 9 AP Profile In the following example, layer-2 isolation is enabled on the NWA/WAC to allow a guest wireless client (A) to access the main network router (B). The router provides access to the Internet and the network printer (C) while preventing the client from accessing other computers and servers on the network. The client can communicate with other wireless clients only if Intra-BSS Traffic blocking is disabled.
Chapter 9 AP Profile Table 51 Configuration > Object > AP Profile > SSID > Layer-2 Isolation List (continued) LABEL DESCRIPTION Object Click this to view which other objects are linked to the selected MAC filtering profile (for Reference example, SSID profile). This field is a sequential value, and it is not associated with a specific user.
Page 114
Chapter 9 AP Profile Table 52 Configuration > Object > AP Profile > SSID > Layer-2 Isolation List > Add/Edit Layer-2 Isolation Profile (continued) LABEL DESCRIPTION This field specifies a MAC address associated with this profile. You can click the MAC address to make it editable.
H A P T E R MON Profile 10.1 Overview This screen allows you to set up monitor mode configurations that allow your NWA/WAC to scan for other wireless devices in the vicinity. Once detected, you can use the Wireless > MON Mode screen (Section 7.3 on page 80) to classify them as either rogue or friendly.
Chapter 10 MON Profile Table 53 Configuration > Object > MON Profile (continued) LABEL DESCRIPTION Inactivate To turn off an entry, select it and click Inactivate. Object Click this to view which other objects are linked to the selected monitor mode profile (for Reference example, an AP management profile).
Chapter 10 MON Profile The following table describes the labels in this screen. Table 54 Configuration > Object > MON Profile > Add/Edit MON Profile LABEL DESCRIPTION Activate Select this to activate this monitor mode profile. Profile Name This field indicates the name assigned to the monitor mode profile. Channel dwell time Enter the interval (in milliseconds) before the NWA/WAC switches to another channel for monitoring.
Page 118
Chapter 10 MON Profile Figure 72 Rogue AP Example In the example above, a corporate network’s security is compromised by a rogue AP (RG) set up by an employee at his workstation in order to allow him to connect his notebook computer wirelessly (A). The company’s legitimate wireless network (the dashed ellipse B) is well-secured, but the rogue AP uses inferior security that is easily broken by an attacker (X) running readily available encryption-cracking software.
H A P T E R WDS Profile 11.1 Overview This chapter shows you how to configure WDS (Wireless Disbribution System) profiles for the NWA/WAC to form a WDS with other APs. 11.1.1 What You Can Do in this Chapter The WDS Profile screen (Section 11.2 on page 119) creates preset WDS configurations that can be used...
Chapter 11 WDS Profile 11.2.1 Add/Edit WDS Profile This screen allows you to create a new WDS profile or edit an existing one. To access this screen, click the Add button or select and existing profile and click the Edit button. Figure 74 Configuration >...
H A P T E R Certificates 12.1 Overview The NWA/WAC can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 12.1.1 What You Can Do in this Chapter •...
Page 122
Chapter 12 Certificates Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny’s public key to verify the message. The NWA/WAC uses certificates based on public-key cryptology to authenticate users attempting to establish a connection, not to encrypt the data that you send after establishing a connection. The method used to secure the data that you send through an established connection depends on the type of connection.
Chapter 12 Certificates • Binary PKCS#12: This is a format for transferring public key and private key certificates.The private key in a PKCS #12 file is within a password-encrypted envelope. The file’s password is not connected to your certificate’s public or private passwords. Exporting a PKCS #12 file creates this and you must provide it to decrypt the contents when you import the file into the NWA/WAC.
Chapter 12 Certificates 12.2 My Certificates Click Configuration > Object > Certificate > My Certificates to open this screen. This is the NWA/WAC’s summary list of certificates and certification requests. Figure 75 Configuration > Object > Certificate > My Certificates The following table describes the labels in this screen.
Chapter 12 Certificates Table 57 Configuration > Object > Certificate > My Certificates (continued) LABEL DESCRIPTION Subject This field displays identifying information about the certificate’s owner, such as CN (Common Name), OU (Organizational Unit or department), O (Organization or company) and C (Country).
Page 127
Chapter 12 Certificates The following table describes the labels in this screen. Table 58 Configuration > Object > Certificate > My Certificates > Add LABEL DESCRIPTION Name Type a name to identify this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Chapter 12 Certificates Table 58 Configuration > Object > Certificate > My Certificates > Add (continued) LABEL DESCRIPTION Create a certification Select this to have the NWA/WAC generate a request for a certificate and apply to a request and enroll for certification authority for a certificate.
Page 130
Chapter 12 Certificates The following table describes the labels in this screen. Table 59 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Chapter 12 Certificates Table 59 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION MD5 Fingerprint This is the certificate’s message digest that the NWA/WAC calculated using the MD5 algorithm. SHA1 Fingerprint This is the certificate’s message digest that the NWA/WAC calculated using the SHA1 algorithm.
Chapter 12 Certificates Figure 78 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. Table 60 Configuration > Object > Certificate > My Certificates > Import LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it.
Chapter 12 Certificates Figure 79 Configuration > Object > Certificate > Trusted Certificates The following table describes the labels in this screen. Table 61 Configuration > Object > Certificate > Trusted Certificates LABEL DESCRIPTION PKI Storage Space This bar displays the percentage of the NWA/WAC’s PKI storage space that is currently in use. in Use When the storage space is almost full, you should consider deleting expired or unnecessary certificates before adding more certificates.
Page 134
Chapter 12 Certificates change the certificate’s name and set whether or not you want the NWA/WAC to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. Figure 80 Configuration > Object > Certificate > Trusted Certificates > Edit NWA / WAC Series User’s Guide...
Page 135
Chapter 12 Certificates The following table describes the labels in this screen. Table 62 Configuration > Object > Certificate > Trusted Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can change the name. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Chapter 12 Certificates Table 62 Configuration > Object > Certificate > Trusted Certificates > Edit (continued) LABEL DESCRIPTION Valid From This field displays the date that the certificate becomes applicable. The text displays in red and includes a Not Yet Valid! message if the certificate has not yet become applicable. Valid To This field displays the date that the certificate expires.
Chapter 12 Certificates Figure 81 Configuration > Object > Certificate > Trusted Certificates > Import The following table describes the labels in this screen. Table 63 Configuration > Object > Certificate > Trusted Certificates > Import LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it.
H A P T E R System 13.1 Overview Use the system screens to configure general NWA/WAC settings. 13.1.1 What You Can Do in this Chapter • The Host Name screen (Section 13.2 on page 138) configures a unique name for the NWA/WAC in your network.
Chapter 13 System The following table describes the labels in this screen. Table 64 Configuration > System > Host Name LABEL DESCRIPTION System Name Choose a descriptive name to identify your NWA/WAC device. This name can be up to 64 alphanumeric characters long.
Page 140
Chapter 13 System Figure 83 Configuration > System > Date/Time The following table describes the labels in this screen. Table 65 Configuration > System > Date/Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the present time of your NWA/WAC. Current Date This field displays the present date of your NWA/WAC.
Page 141
Chapter 13 System Table 65 Configuration > System > Date/Time (continued) LABEL DESCRIPTION Get from Time Select this radio button to have the NWA/WAC get the time and date from the time server Server you specify below. The NWA/WAC requests time and date settings from the time server under the following circumstances.
Chapter 13 System 13.3.1 Pre-defined NTP Time Servers List When you turn on the NWA/WAC for the first time, the date and time start at 2003-01-01 00:00:00. The NWA/WAC then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers.
Chapter 13 System To get the NWA/WAC date and time from a time server: Click System > Date/Time. Select Get from Time Server under Time and Date Setup. Under Time Zone Setup, select your Time Zone from the list. Under Time and Date Setup, enter a Time Server Address. Click Apply.
Chapter 13 System 13.4.3 HTTPS You can set the NWA/WAC to use HTTP or HTTPS (HTTPS adds security) for Web Configurator sessions. HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot read the transferred data), authentication (one party can identify the other party) and data integrity (you know if data has been changed).
Page 145
Chapter 13 System Figure 87 Configuration > System > WWW > Service Control The following table describes the labels in this screen. Table 67 Configuration > System > WWW > Service Control LABEL DESCRIPTION HTTPS Enable Select the check box to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the NWA/WAC Web Configurator using secure HTTPs connections.
Chapter 13 System 13.4.5 HTTPS Example If you haven’t changed the default HTTPS port on the NWA/WAC, then in your browser enter “https:// NWA/WAC IP Address/” as the web site address where “NWA/WAC IP Address” is the IP address or domain name of the NWA/WAC you wish to access.
Page 147
Chapter 13 System Figure 89 Security Certificate 1 (Firefox) Figure 90 Security Certificate 2 (Firefox) 13.4.5.3 Avoiding Browser Warning Messages Here are the main reasons your browser displays warnings about the NWA/WAC’s HTTPS server certificate and what you can do to avoid seeing the warnings: •...
Page 148
Chapter 13 System • For the browser to trust a self-signed certificate, import the self-signed certificate into your operating system as a trusted certificate. • To have the browser trust the certificates issued by a certificate authority, import the certificate authority’s certificate into your operating system as a trusted certificate.
Page 149
Chapter 13 System 13.4.5.5 Installing the CA’s Certificate Double click the CA’s trusted certificate to produce a screen similar to the one shown next. Click Install Certificate and follow the wizard as shown. 13.4.5.6 Installing a Personal Certificate You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment.
Page 150
Chapter 13 System Click Next to begin the wizard. The file name and path of the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA / WAC Series User’s Guide...
Page 151
Chapter 13 System Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA / WAC Series User’s Guide...
Page 152
Chapter 13 System Click Finish to complete the wizard and begin the import process. You should see the following screen when the certificate is correctly installed on your computer. 13.4.5.7 Using a Certificate When Accessing the NWA/WAC To access the NWA/WAC via HTTPS: Enter ‘https://NWA/WAC IP Address/’...
Chapter 13 System When Authenticate Client Certificates is selected on the NWA/WAC, the following screen asks you to select a personal certificate to send to the NWA/WAC. This screen displays even if you only have a single certificate as in the example. You next see the Web Configurator login screen.
Chapter 13 System Figure 93 How SSH v1 Works Example Host Identification The SSH client sends a connection request to the SSH server. The server identifies itself with a host key. The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server.
Chapter 13 System 13.5.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the NWA/WAC over SSH. 13.5.4 Configuring SSH Click Configuration > System > SSH to open the following screen. Use this screen to configure your NWA/ WAC’s Secure Shell settings.
Page 156
Chapter 13 System Launch the SSH client and specify the connection information (IP address, port number) for the NWA/ WAC. Configure the SSH client to accept connection using SSH version 1. A window displays prompting you to store the host key in you computer. Click Yes to continue. Figure 95 SSH Example 1: Store Host Key Enter the password to log in to the NWA/WAC.
Chapter 13 System The CLI screen displays next. 13.6 Telnet You can use Telnet to access the NWA/WAC’s command line interface. Click Configuration > System > TELNET to configure your NWA/WAC for remote Telnet access. Use this screen to enable or disable Telnet and set the server port number.
Chapter 13 System Figure 99 Configuration > System > FTP The following table describes the labels in this screen. Table 70 Configuration > System > FTP LABEL DESCRIPTION Enable Select the check box to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the NWA/WAC using this service.
Chapter 13 System Figure 100 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (the NWA/WAC). An agent translates the local management information from the managed device into a form compatible with SNMP.
Chapter 13 System administrators collect statistical data and monitor status and performance. You can download the NWA/WAC’s MIBs from www.zyxel.com. 13.8.2 SNMP Traps The NWA/WAC will send traps to the SNMP manager when any one of the following events occurs. Table 71 SNMP Traps OBJECT LABEL OBJECT ID...
Chapter 13 System Table 72 Configuration > System > SNMP (continued) LABEL DESCRIPTION Trap Community Type the trap community, which is the password sent with each trap to the SNMP manager. The default is public and allows all requests. Destination Type the IP address of the station to send your SNMP traps to.
Page 162
Chapter 13 System The following table describes the labels in this screen. Table 73 Configuration > System > SNMP LABEL DESCRIPTION User Name Select the user name of the user account for which this SNMPv3 user profile is configured. Authentication Select the type of authentication the SNMPv3 user must use to connect to the NWA/WAC using this SNMPv3 user profile.
H A P T E R Log and Report 14.1 Overview Use the system screens to configure daily reporting and log settings. 14.1.1 What You Can Do In this Chapter • The Email Daily Report screen (Section 14.2 on page 163) configures how and where to send daily reports and what reports to send.
Chapter 14 Log and Report The following table describes the labels in this screen. Table 74 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION Enable Email Select this to send reports by e-mail every day. Daily Report Mail Server Type the name or IP address of the outgoing SMTP server.
Chapter 14 Log and Report For alerts, the Log Setting screen controls which events generate alerts and where alerts are e-mailed. The Log Setting screen provides a summary of all the settings. You can use the Edit Log Setting screen to maintain the detailed settings (such as log categories, e-mail addresses, server names, etc.) for any log.
Chapter 14 Log and Report Table 75 Configuration > Log & Report > Log Setting (continued) LABEL DESCRIPTION Log Format This field displays the format of the log. Internal - system log; you can view the log on the View Log tab. VRPT/Syslog - Zyxel’s Vantage Report, syslog-compatible format.
Page 168
Chapter 14 Log and Report Figure 105 Configuration > Log & Report > Log Setting > Edit System Log Setting The following table describes the labels in this screen. Table 76 Configuration > Log & Report > Log Setting > Edit System Log Setting LABEL DESCRIPTION E-Mail Server 1/2...
Page 169
Chapter 14 Log and Report Table 76 Configuration > Log & Report > Log Setting > Edit System Log Setting (continued) LABEL DESCRIPTION SSL/TLS Encryption Select SSL/TLS to use Secure Sockets Layer (SSL) or Transport Layer Security (TLS) if you want encrypted communications between the mail server and the NWA/WAC.
Chapter 14 Log and Report Table 76 Configuration > Log & Report > Log Setting > Edit System Log Setting (continued) LABEL DESCRIPTION E-mail Server 2 Use the E-Mail Server 2 drop-down list to change the settings for e-mailing logs to e-mail server 2 for all log categories.
Page 171
Chapter 14 Log and Report Figure 106 Configuration > Log & Report > Log Setting > Edit Remote Server NWA / WAC Series User’s Guide...
Chapter 14 Log and Report The following table describes the labels in this screen. Table 77 Configuration > Log & Report > Log Setting > Edit Remote Server LABEL DESCRIPTION Log Settings for Remote Server Active Select this check box to send log information according to the information in this section. You specify what kinds of messages are included in log information in the Active Log section.
Page 173
Chapter 14 Log and Report Figure 107 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) NWA / WAC Series User’s Guide...
Page 174
Chapter 14 Log and Report The following table describes the fields in this screen. Table 78 Configuration > Log & Report > Log Setting > Active Log Summary LABEL DESCRIPTION Active Log If the NWA/WAC is set to controller mode, the AC section controls logs generated by the Summary controller and the AP section controls logs generated by the managed APs.
Page 175
Chapter 14 Log and Report Table 78 Configuration > Log & Report > Log Setting > Active Log Summary (continued) LABEL DESCRIPTION E-mail Server 2 E- Select whether each category of events should be included in log messages when it is e- mail mailed (green check mark) and/or in alerts (red exclamation point) for the e-mail settings specified in E-Mail Server 2.
H A P T E R File Manager 15.1 Overview Configuration files define the NWA/WAC’s settings. Shell scripts are files of commands that you can store on the NWA/WAC and run when you need them. You can apply a configuration file or run a shell script without the NWA/WAC restarting.
Chapter 15 File Manager While configuration files and shell scripts have the same syntax, the NWA/WAC applies configuration files differently than it runs shell scripts. This is explained below. Table 79 Configuration Files and Shell Scripts in the NWA/WAC Configuration Files (.conf) Shell Scripts (.zysh) •...
Page 178
Chapter 15 File Manager Once your NWA/WAC is configured and functioning properly, it is highly recommended that you back up your configuration file before making further configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. Configuration File Flow at Restart •...
Page 179
Chapter 15 File Manager The following table describes the labels in this screen. Table 80 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Rename Use this button to change the label of a configuration file on the NWA/WAC. You can only rename manually saved configuration files.
Page 180
Chapter 15 File Manager Table 80 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Apply Use this button to have the NWA/WAC use a specific configuration file. Click a configuration file’s row to select it and click Apply to have the NWA/WAC use that configuration file.
Chapter 15 File Manager Table 80 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Last Modified This column displays the date and time that the individual configuration files were last changed or saved. Upload The bottom part of the screen allows you to upload a new or previously saved configuration file Configuration File from your computer to your NWA/WAC You cannot upload a configuration file named system-default.conf or lastgood.conf.
Chapter 15 File Manager C:\>ftp 192.168.1.2 Connected to 192.168.1.2. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 5 allowed. 220-Local time is now 21:28. Server port: 21. 220-This is a private system - No anonymous login 220 You will be disconnected after 600 minutes of inactivity.
Chapter 15 File Manager Figure 110 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen. Table 81 Maintenance > File Manager > Firmware Package LABEL DESCRIPTION Boot This is the version of the boot module that is currently on the NWA/WAC. Module Current This is the firmware version and the date created.
Chapter 15 File Manager Connect your computer to the NWA/WAC. The FTP server IP address of the NWA/WAC in standalone AP mode is 192.168.1.2, so set your computer to use a static IP address from 192.168.1.3 ~192.168.1.254. Use an FTP client on your computer to connect to the NWA/WAC. For example, in the Windows command prompt, type ftp 192.168.1.2.
Page 185
Chapter 15 File Manager Note: You should include write commands in your scripts. If you do not use the write command, the changes will be lost when the NWA/WAC restarts. You could use multiple write commands in a long script. Figure 112 Maintenance >...
Page 186
Chapter 15 File Manager Table 82 Maintenance > File Manager > Shell Script (continued) LABEL DESCRIPTION Last This column displays the date and time that the individual shell script files were last changed or Modified saved. Upload Shell The bottom part of the screen allows you to upload a new or previously saved shell script file from Script your computer to your NWA/WAC.
H A P T E R Diagnostics 16.1 Overview Use the diagnostics screen for troubleshooting. 16.1.1 What You Can Do in this Chapter • The Diagnostics screen (Section 16.2 on page 187) generates a file containing the NWA/WAC’s configuration and diagnostic information if you need to provide it to customer support during troubleshooting.
Page 188
Chapter 16 Diagnostics The following table describes the labels in this screen. Table 83 Maintenance > Diagnostics LABEL DESCRIPTION Filename This is the name of the most recently created diagnostic file. Last modified This is the date and time that the last diagnostic file was created. The format is yyyy-mm-dd hh:mm:ss.
H A P T E R LEDs 17.1 Overview The LEDs of your NWA/WAC can be controlled such that they stay lit (ON) or OFF after the NWA/WAC is ready. There are two features that control the LEDs of your NWA/WAC - Locator and Suppression. 17.1.1 What You Can Do in this Chapter •...
Chapter 17 LEDs Figure 114 Maintenance > LEDs > Suppression The following table describes fields in the above screen. Table 84 Maintenance > LED > Suppression LABEL DESCRIPTION Suppression On If the Suppression On check box is checked, the LEDs of your NWA/WAC will turn off after it’s ready.
Page 191
Chapter 17 LEDs Figure 115 Maintenance > LEDs > Locator The following table describes fields in the above screen. Table 85 Maintenance > LED > Locator LABEL DESCRIPTION Turn On Click Turn On button to activate the locator. The Locator function will show the actual location of the WAC between several devices in the network.
H A P T E R Antenna Switch 18.1 Overview Use this screen to adjust coverage depending on the orientation of the antenna. 18.1.1 What You Need To Know Positioning the antennas properly increases the range and coverage area of a wireless LAN. On the NWA/WAC that comes with internal antennas and also has an antenna switch, you can adjust coverage depending on the orientation of the antenna for the NWA/WAC radios using the web configurator, the command line interface (CLI) or a physical switch.
Page 193
Chapter 18 Antenna Switch Figure 117 Maintenance > Antenna > Antenna Switch Select the Enable Software Control option to use the Web configurator to adjust coverage depending on each radio’s antenna orientation for better coverage. Select Wall if you mount the NWA/WAC to a wall.
H A P T E R Reboot 19.1 Overview Use this screen to restart the device. 19.1.1 What You Need To Know If you applied changes in the Web configurator, these were saved automatically and do not change when you reboot. If you made changes in the CLI, however, you have to use the write command to save the configuration before you reboot.
H A P T E R Shutdown 20.1 Overview Use this screen to shut down the device. Always use Maintenance > Shutdown > Shutdown or the shutdown command before you turn off the NWA/WAC or remove the power. Not doing so can cause the firmware to become corrupt. 20.1.1 What You Need To Know Shutdown writes all cached data to the local storage and stops the system processes.
H A P T E R Troubleshooting 21.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LED • NWA/WAC Access and Login •...
Chapter 21 Troubleshooting Disconnect and re-connect the power adaptor or PoE power injector to the NWA/WAC. If the problem continues, contact the vendor. 21.3 NWA/WAC Access and Login I forgot the IP address for the NWA/WAC. The default IP address (in standalone AP mode) is 192.168.1.2. If you changed the IP address and have forgotten it, you have to reset the device to its factory defaults.
Chapter 21 Troubleshooting • Try to access the NWA/WAC using another service, such as Telnet. If you can access the NWA/WAC, check the remote management settings to find out why the NWA/WAC does not respond to HTTP. • If your computer is connected wirelessly, use a computer that is connected to a LAN/ETHERNET port. I forgot the password.
Chapter 21 Troubleshooting If you are trying to access the Internet wirelessly, make sure the wireless settings on the wireless client are the same as the settings on the NWA/WAC. Disconnect all the cables from your device, and follow the directions in the Quick Start Guide again. If the problem continues, contact your ISP.
Page 200
Chapter 21 Troubleshooting Make sure the radio or at least one of the NWA/WAC’s radios is operating in AP mode. Make sure the wireless adapter (installed on your computer) is working properly. Make sure the wireless adapter (installed on your computer) is IEEE 802.11 compatible and supports the same wireless standard as the NWA/WAC’s active radio.
Page 201
Chapter 21 Troubleshooting • Binary PKCS#12: This is a format for transferring public key and private key certificates.The private key in a PKCS #12 file is within a password-encrypted envelope. The file’s password is not connected to your certificate’s public or private passwords. Exporting a PKCS #12 file creates this and you must provide it to decrypt the contents when you import the file into the NWA/WAC.
Page 202
Chapter 21 Troubleshooting In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicator associated with any APs assigned to the load balancing task. • Check to be sure that the AP profile which contains the load balancing settings is correctly assigned to the APs in question.
Page 203
Chapter 21 Troubleshooting • Detach the WAC6500 series indoor AP from the mounting bracket. How do I remove the NWA1123-AC PRO and WAC6103D-I indoor AP from its mounting bracket? • Find the down arrow close to the Ethernet ports, then use a thin flat tool (for example, a flat screw driver) to lift up a clip beneath 5GHz LED.
Chapter 21 Troubleshooting • Turn the NWA1123-AC PRO or WAC6103D-I indoor AP counter-clockwise to detach it from the mounting bracket. 21.6 Resetting the NWA/WAC If you cannot access the NWA/WAC by any method, try restarting it by turning the power off and then on again.
Chapter 21 Troubleshooting Make sure the Power LED is on and not blinking. Press the RESET button and hold it until the Power LED begins to blink. (This usually takes about ten seconds.) Release the RESET button, and wait for the NWA/WAC to restart. You should be able to access the NWA/WAC using the default settings.
P P E N D I X Importing Certificates This appendix shows you how to import public key certificates into your web browser. Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as VeriSign, Comodo, or Network Solutions, to name a few, receives a certificate request from a website operator, they confirm that the web domain and contact information in the request match those on public record with a domain name registrar.
Page 207
Appendix A Importing Certificates If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Continue to this website (not recommended). In the Address Bar, click Certificate Error > View certificates. NWA / WAC Series User’s Guide...
Page 208
Appendix A Importing Certificates In the Certificate dialog box, click Install Certificate. In the Certificate Import Wizard, click Next. NWA / WAC Series User’s Guide...
Page 209
Appendix A Importing Certificates If you want Internet Explorer to Automatically select certificate store based on the type of certificate, click Next again and then go to step 9. Otherwise, select Place all certificates in the following store and then click Browse. In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK.
Page 210
Appendix A Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. 10 If you are presented with another Security Warning, click Yes. 11 Finally, click OK when presented with the successful certificate installation message. NWA / WAC Series User’s Guide...
Page 211
Appendix A Importing Certificates 12 The next time you start Internet Explorer and go to a Zyxel Web Configurator page, a sealed padlock icon appears in the address bar. Click it to view the page’s Website Identification information. Installing a Stand-Alone Certificate File in Internet Explorer Rather than browsing to a Zyxel Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you.
Page 212
Appendix A Importing Certificates Removing a Certificate in Internet Explorer This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP. Open Internet Explorer and click Tools > Internet Options. In the Internet Options dialog box, click Content > Certificates. NWA / WAC Series User’s Guide...
Page 213
Appendix A Importing Certificates In the Certificates dialog box, click the Trusted Root Certificates Authorities tab, select the certificate that you want to delete, and then click Remove. In the Certificates confirmation, click Yes. In the Root Certificate Store dialog box, click Yes. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Page 214
Appendix A Importing Certificates Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however, the screens can also apply to Firefox 2 on all platforms. If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
Page 215
Appendix A Importing Certificates Installing a Stand-Alone Certificate File in Firefox Rather than browsing to a Zyxel Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Firefox and click Tools >...
Page 216
Appendix A Importing Certificates In the Certificate Manager dialog box, click Web Sites > Import. Use the Select File dialog box to locate the certificate and then click Open. The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the web page’s security information.
Page 217
Appendix A Importing Certificates Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA / WAC Series User’s Guide...
Page 218
Appendix A Importing Certificates In the Certificate Manager dialog box, select the Web Sites tab, select the certificate that you want to remove, and then click Delete. In the Delete Web Site Certificates dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
Page 220
Appendix B IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
Page 221
Appendix B IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
Page 222
Appendix B IPv6 Each DHCP client and server has a unique DHCP Unique IDentifier (DUID), which is used for identification when they are exchanging DHCPv6 messages. The DUID is generated from the MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device.
Page 223
Appendix B IPv6 ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6.
Page 224
Appendix B IPv6 MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive multicast packets and the IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join.
Page 225
Appendix B IPv6 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client.
Page 226
Appendix B IPv6 Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. Click Close to exit the Local Area Connection Status screen. Select Start >...
• Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • http://www.zyxel.cn India • Zyxel Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
Page 229
Appendix C Customer Support Belgium • Zyxel Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • http://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz Denmark • Zyxel Communications A/S • http://www.zyxel.dk Estonia • Zyxel Estonia • http://www.zyxel.com/ee/et/ Finland •...
Page 230
• Zyxel Communications Poland • http://www.zyxel.pl Romania • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • Zyxel Communications ES Ltd • http://www.zyxel.es Sweden • Zyxel Communications • http://www.zyxel.se Switzerland •...
Page 231
Appendix C Customer Support • http://www.zyxel.ch/ Turkey • Zyxel Turkey A.S. • http://www.zyxel.com.tr • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com Latin America Argentina • Zyxel Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • Zyxel Communications Brasil Ltda.
Page 232
Appendix C Customer Support North America • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NWA / WAC Series User’s Guide...
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
Page 234
Appendix D Legal Information Industry Canada ICES statement CAN ICES-3 (B)/NMB-3(B) Industry Canada RSS-GEN & RSS-247 statement • This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device.
Page 235
Appendix D Legal Information • For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall be such that the equipment still complies with the e.i.r.p. limit. • Le présent appareil est conforme aux CNR d’Industrie Canada applicables aux appareils radio exempts de licence. L’exploitation est autorisée aux deux conditions suivantes : (1) l’appareil ne doit pas produire de brouillage, et (2) l’utilisateur de l’appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d’en compromettre le fonctionnement.
Page 236
Appendix D Legal Information Industry Canada radiation exposure statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator and your body. This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.
Page 237
Appendix D Legal Information English Hereby, Zyxel declares that this equipment is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Français Par la présente Zyxel déclare que l'appareil équipements est conforme aux exigences essentielles et aux autres dispositions (French) pertinentes de la directive 1999/5/EC.
Page 238
RF exposure requirement. External antenna Use only the antennas which have been approved by Zyxel Communications Corporation. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of FCC/IC limit and is prohibited.
Page 239
Appendix D Legal Information Installation Ce produit est destine a un usage specifique et doit etre installe par un personnel qualifie maitrisant les radiofrequences et les regles s'y rapportant. L'installation et les reglages ne doivent pas etre modifies par l'utilisateur final. Emplacement d'installation En usage normal, afin de respecter les exigences reglementaires concernant l'exposition aux radiofrequences, ce produit doit etre installe de facon a respecter une distance de 30 cm entre l'antenne emettrice et les personnes.
Page 240
Appendix D Legal Information Il simbolo sotto significa che secondo i regolamenti locali il vostro prodotto e/o batteria deve essere smaltito separatamente dai rifiuti domestici. Quando questo prodotto raggiunge la fine della vita di servizio portarlo a una stazione di riciclaggio. Al momento dello smaltimento, la raccolta separata del vostro prodotto e/o della sua batteria aiuta a risparmiare risorse naturali e a proteggere l'ambiente e la salute umana.
Page 241
Appendix D Legal Information Environmental Product Declaration NWA / WAC Series User’s Guide...
Page 242
Appendix D Legal Information 台灣 以下訊息僅適用於產品銷售至台灣地區 第十二條 經型式認證合格之低功率射頻電機,非經許可,公司,商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。 第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信;經發現有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用。 前項合法通信,指依電信法規定作業之無線電通信。 低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 電磁波曝露量 MPE 標準值 1mW/cm2,送測產品 (NWA5123-AC) 實測值為:0.316 mW/cm2 本產品使用時建議應距離人體 20 cm 電磁波曝露量 MPE 標準值 1mW/cm2,送測產品 (NWA1123-ACv2) 實測值為:0.316 mW/cm2 本產品使用時建議應距離人體 20 cm 電磁波曝露量 MPE 標準值 1mW/cm2,送測產品 (NWA5121-N) 實測值為:0.218 mW/cm2 本產品使用時建議應距離人體 20 cm 電磁波曝露量...
Page 243
Appendix D Legal Information Zyxel Limited Warranty Zyxel warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. The Warranty Period varies by region. Check with your vendor and/or the authorized Zyxel local distributor for details about the Warranty Period of this product.
Index Index see certificates Symbols Certificate Management Protocol (CMP) Certificate Revocation List (CRL) vs OCSP certificates advantages of and CA and FTP access and HTTPS access privileges and SSH and WWW access users certification path see also users 122, 130, 135 expired admin users factory-default...
Page 245
Index configuration files at restart backing up e-mail downloading daily statistics report downloading with FTP encryption editing ESSID how applied Extended Service Set IDentification lastgood.conf 178, 180 managing startup-config.conf startup-config-bad.conf syntax system-default.conf FCC interference statement uploading file extensions uploading with FTP configuration files use without restart shell scripts...
Page 246
Index example LED suppression vs HTTP LEDs with Internet Explorer Blinking 21, 23, 27 with Netscape Navigator Flashing 21, 23, 24, 25, 27 HyperText Transfer Protocol over Secure Socket Layer, 21, 23, 24, 26, 27 see HTTPS load balancing Locator LED log messages categories 170, 172, 173, 174...
Page 247
Index warning WWW, see WWW mode reports daily model name daily e-mail My Certificates, see also certificates reset vs reboot vs shutdown RESET button 28, 204 restart network access control RF interference Network Time Protocol (NTP) 2510 (Certificate Management Protocol or CMP) Rivest, Shamir and Adleman public-key algorithm (RSA)
Page 248
Index GetNext Manager managers Telnet with SSH network components time time servers (default) Trap trademarks traps versions Transport Layer Security (TLS) troubleshooting and certificates Trusted Certificates, see also certificates client requirements encryption methods for secure Telnet how connection is established versions with Linux upgrading...
Page 249
Index Vantage Report (VRPT) 167, 172 Virtual Local Area Network VLAN introduction VRPT (Vantage Report) 167, 172 warm start warning message popup warranty note 12, 16 Web Configurator 17, 29 access requirements supported browsers web configurator WEP (Wired Equivalent Privacy) wireless channel wireless client Wireless Distribution System (WDS)
Need help?
Do you have a question about the NWA1123ACPRO-EU0101F and is the answer not in the manual?
Questions and answers