Page 1 User’s Guide NWA/WAC/WAX Series 802.11 a/b/g/n/ac/ax Access Point Version 6.40 Edition 1, 6/2022 Default Login Details Management IP http://DHCP-assigned IP Address http://192.168.1.2 User Name admin Password 1234 Copyright © 2022 Zyxel and/or its affiliates. All rights reserved.
Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product hardware, firmware, or your computer operating system.
Page 3: Document Conventions
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Page 4: Table Of Contents
Contents Overview Contents Overview Introduction ............................13 AP Management ..........................30 Hardware ............................... 40 Web Configurator ..........................61 Standalone Configuration ........................73 Standalone Configuration ........................74 Dashboard ............................76 Setup Wizard ............................82 Monitor ..............................89 Network ............................... 104 Wireless ..............................117 Bluetooth .............................
Page 5: Table Of Contents
Table of Contents Table of Contents Document Conventions ........................3 Contents Overview ..........................4 Table of Contents ..........................5 Chapter 1 Introduction ............................13 1.1 Overview ............................13 1.2 Zyxel Device Product Feature Comparison ................14 1.3 Zyxel Device Roles .......................... 22 1.3.1 Root AP ........................... 24 1.3.2 Wireless Repeater ........................
Page 6 Table of Contents 3.3.4 WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S ......................46 3.3.5 NWA220AX-6E, WAX620D-6E, and WAX640S-6E ..............49 3.4 Zyxel Device Models With Multiple LEDs ..................51 3.4.1 NWA1123-AC PRO ........................ 51 3.4.2 NWA1302-AC ......................... 53 3.4.3 WAC6502D-E, WAC6502D-S, and WAC6503D-S ..............
Page 7 Table of Contents 7.2.5 Summary ..........................87 Chapter 8 Monitor ..............................89 8.1 Overview ............................89 8.1.1 What You Can Do in this Chapter ..................89 8.2 What You Need to Know ....................... 89 8.3 Network Status ..........................90 8.3.1 Port Statistics Graph ......................91 8.4 Radio List ............................
Page 8 Table of Contents 11.1.1 What You Need To Know ....................134 11.2 Bluetooth Advertising Settings ....................135 11.2.1 Edit Advertising Settings ....................135 Chapter 12 User..............................137 12.1 Overview ............................. 137 12.1.1 What You Can Do in this Chapter ................... 137 12.1.2 What You Need To Know ....................
Page 9 Table of Contents 15.2.1 Add/Edit WDS Profile ......................181 Chapter 16 Certificates ............................182 16.1 Overview ............................. 182 16.1.1 What You Can Do in this Chapter ................... 182 16.1.2 What You Need to Know ....................182 16.1.3 Verifying a Certificate ...................... 184 16.2 My Certificates ..........................
Page 10 Table of Contents 17.8.4 Adding or Editing an SNMPv3 User Profile ..............218 Chapter 18 Log and Report..........................220 18.1 Overview ............................. 220 18.1.1 What You Can Do In this Chapter .................. 220 18.2 Email Daily Report ........................220 18.3 Log Setting ........................... 222 18.3.1 Log Setting Screen ......................
Page 11 Table of Contents Chapter 23 Reboot...............................251 23.1 Overview ............................. 251 23.1.1 What You Need To Know ....................251 23.2 Reboot ............................251 Chapter 24 Shutdown ............................252 24.1 Overview ............................. 252 24.1.1 What You Need To Know ....................252 24.2 Shutdown ............................. 252 Part II: Local Configuration in Cloud Mode..........
Page 12 Table of Contents 28.1 Overview ............................. 267 28.2 Power, Hardware Connections, and LED ................267 28.3 Zyxel Device Management, Access, and Login ..............268 28.4 Internet Access ........................... 272 28.5 WiFi Network ..........................273 28.6 Resetting the Zyxel Device ......................275 28.7 Getting More Troubleshooting Help ..................
Page 13: Introduction
H A P T E R Introduction 1.1 Overview This User’s Guide covers the models listed in the following table. They can be managed in one of the following methods: remote management through Nebula Control Center (NCC) or an AP Controller (AC) such as the ZyWALL ATP, or local management in Standalone Mode.
Page 14: Zyxel Device Product Feature Comparison
Chapter 1 Introduction 1.2 Zyxel Device Product Feature Comparison The following tables show the differences between each Zyxel Device model. You can find the feature introductions in the later sections. Table 1 1000/5000 Models Comparison Table NWA1123- NWA1123 NWA1123 NWA1302- NWA5123 NWA5123 WAC5302...
Page 15 Chapter 1 Introduction Table 1 1000/5000 Models Comparison Table (continued) NWA1123- NWA1123 NWA1123 NWA1302- NWA5123 NWA5123 WAC5302 FEATURES -AC PRO -AC HD -AC HD External Antennas Internal Antennas Antenna Switch (per radio + physical switch) Smart Antenna Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial 4-Pin Serial...
Page 16 Chapter 1 Introduction Table 2 500/1000/5000 Models Comparison Table WAC500/ FEATURES NWA1123-AC WAC5302D-S WAC500H Supported WiFi IEEE 802.11a IEEE 802.11a IEEE 802.11a IEEE 802.11b IEEE 802.11b IEEE 802.11b Standards IEEE 802.11g IEEE 802.11g IEEE 802.11g IEEE 802.11n IEEE 802.11n IEEE 802.11n IEEE 802.11ac IEEE 802.11ac IEEE 802.11ac...
Page 17 Chapter 1 Introduction Table 2 500/1000/5000 Models Comparison Table (continued) WAC500/ FEATURES NWA1123-AC WAC5302D-S WAC500H AC (AP Controller) Discovery NebulaFlex PRO NCC Discovery 802.11r Fast Roaming Support 802.11k/v Assisted Roaming Bluetooth Low Energy (BLE) USB Port for BLE Ethernet Storm Control Wireless Remote...
Page 18 Chapter 1 Introduction Table 3 WAC 6000 Models Comparison Table (continued) WAC6502D-S WAC6502D-E FEATURES WAC6103D-I WAC6303D-S WAC6503D-S WAC6553D-E WAC6552D-S Number of WiFi Radios Monitor Mode & Rogue APs Containment (AP controller managed devices only) Rogue AP Detection WDS (Wireless Distribution System) - Root AP &...
Page 19 Chapter 1 Introduction Table 3 WAC 6000 Models Comparison Table (continued) WAC6502D-S WAC6502D-E FEATURES WAC6103D-I WAC6303D-S WAC6503D-S WAC6553D-E WAC6552D-S Power Jack WAC6502D-S: Yes WAC6502D-E: Yes WAC6503D-S: Yes WAC6553D-E: No WAC6552D-S: No Latest Firmware 6.25 6.25 6.25 6.25 Version Supported Maximum number 512 event logs of log messages Table 4 WiFi 6 Models Comparison Table...
Page 20 Chapter 1 Introduction Table 4 WiFi 6 Models Comparison Table (continued) WAX510D NWA110AX FEATURES WAX630S WAX650S WAX610D NWA210AX Internal Antennas Antenna Switch (per AP) Smart Antenna Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial 4-Pin Serial LED Locator LED Suppression AC (AP Controller) Discovery NebulaFlex PRO...
Page 21 Table 5 WiFi 6E Models Comparison Table (continued) FEATURES WAX620D-6E WAX640S-6E NWA220AX-6E Number of SSID Profiles Number of WiFi Radios Monitor Mode & Rogue APs Containment (AP controller managed devices only) Rogue AP Detection WDS (Wireless Distribution System) - Root AP & Repeater Modes Wireless Bridge Tunnel Forwarding...
Page 22: Zyxel Device Roles
Chapter 1 Introduction 1.3 Zyxel Device Roles This section describes some of the different roles that your Zyxel Device can take up within a network. Not all roles are supported by all models (see Section 1.2 on page 14). The Zyxel Device can serve as a: •...
Page 23 Chapter 1 Introduction Figure 2 Wireless Distribution System Network Example The following figure shows an example of a WDS with a repeater acting as a wireless bridge. A wireless bridge can connect two wired networks through a wireless connection. The root AP (X) is connected to a network with Internet access.
Page 24: Root Ap
Chapter 1 Introduction Figure 3 Wireless Bridge Network Example 1.3.1 Root AP In Root AP mode, you can have multiple SSIDs active for regular WiFi connections and one SSID for the connection with a repeater (repeater SSID). WiFi clients can use either SSID to associate with the Zyxel Device in Root AP mode.
Page 25 Chapter 1 Introduction Figure 4 Repeater Application When the Zyxel Device is in Repeater mode, repeater security between the Zyxel Device and other repeater is independent of the security between the WiFi clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key.
Page 26: Radio Frequency (Rf) Monitor
Chapter 1 Introduction Note: Make sure the VLAN settings on both the root AP and the wireless repeater are exactly the same so they can communicate. Note: When wireless bridge is enabled, wireless interfaces for client devices will be disabled. You can only transmit data through the wireless repeater’s ports.
Page 27: Sample Feature Applications
Chapter 1 Introduction Create a MON Profile in CONFIGURATION > Object > MON Profile > Add. Specify a Channel dwell time to determine how long the RF monitor scans a specific channel before moving to the next one. To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode. Make sure that the Activate check box is selected and click OK.
Page 28: Dual-Radio/Triple-Radio And Bandflex
Chapter 1 Introduction Figure 5 Multiple BSSs 1.4.2 Dual-Radio/Triple-Radio and BandFlex The Zyxel Device models are equipped with two or even three WiFi radios. The Zyxel Device uses the WiFi radios to transmit WiFi signals. This means you can configure two to three different WiFi networks to operate simultaneously.
Page 29 Chapter 1 Introduction Figure 6 Dual-Radio Application Figure 7 Triple-Radio Application NWA/WAC/WAX Series User’s Guide...
Page 30: Ap Management
Chapter 2 AP Management H A P T E R AP Management 2.1 Management Mode The Zyxel Device is a unified AP and can be managed by the NCC or an AP controller (AC), or work as a standalone device. We recommend you use NCC to manage multiple APs (see the NCC User’s Guide). An AP Controller, such as the ZyWALL ATP/VPN, USG FLEX, or NXC, can only manage multiple APs in the same location.
Page 31: Nebula Control Center
Chapter 2 AP Management 2.1.2 Nebula Control Center In this mode, which is also called cloud mode, you can manage and monitor the Zyxel Device through the Zyxel Nebula cloud-based network management system. This means you can manage devices remotely without the need of connecting to each device directly. It offers many features to better manage and monitor not just the Zyxel Device, but your network as a whole, including supported switches and gateways.
Page 32: Ap Controller (Ac)
Chapter 2 AP Management Figure 8 Traffic Monitoring Graph From NCC See the NCC (Nebula Control Center) User’s Guide for how to configure Nebula managed devices. See Chapter 26 on page 257 if you want to change the Zyxel Device’s VLAN setting or manually set its IP address.
Page 33: Switching Management Modes
Chapter 2 AP Management Note: If the Zyxel Device is already registered to NCC, the controller will be unable to manage An AC uses Control And Provisioning of Wireless Access Points (CAPWAP, see RFC 5415) to discover and configure multiple managed APs. 2.2 Switching Management Modes The Zyxel Device is in standalone mode by default, with NCC and/or AC discovery enabled.
Page 34: Zyxel One Network (Zon) Utility
Chapter 2 AP Management 2.3 Zyxel One Network (ZON) Utility ZON Utility is a program designed to help you deploy and manage a network more efficiently. It detects devices automatically and allows you to do basic settings on devices in the network without having to be near it.
Page 35 Chapter 2 AP Management Figure 9 Supported Devices and Versions If you want to check the supported models and firmware versions later, you can click the Show information about ZON icon in the upper right hand corner of the screen. Then select the Supported model and firmware version link.
Page 36 Chapter 2 AP Management Figure 11 Network Adapter Click the Go button for the ZON Utility to discover all supported devices in your network. Figure 12 Discovery The ZON Utility screen shows the devices discovered. Figure 13 ZON Utility Screen Select a device and then use the icons to perform actions.
Page 37 Chapter 2 AP Management Figure 14 Password Prompt The following table describes the icons numbered from left to right in the ZON Utility screen. Table 8 ZON Utility Icons ICON DESCRIPTION 1 IP Configuration Change the selected device’s IP address. 2 Renew IP Address Update a DHCP-assigned dynamic IP address.
Page 38: Ways To Access The Zyxel Device
Chapter 2 AP Management The following table describes the fields in the ZON Utility main screen. Table 9 ZON Utility Fields LABEL DESCRIPTION Type This field displays an icon of the kind of device discovered. Model This field displays the model name of the discovered device. Firmware Version This field displays the firmware version of the discovered device.
Page 39: Good Habits For Managing The Zyxel Device
Chapter 2 AP Management AP Controller (AC) An AP controller lets you configure multiple APs through a single device. See the ZyWALL ATP, ZyWALL VPN, USG FLEX, or NXC Series User’s Guide for more information. ZON Utility Zyxel One Network (ZON) Utility is a utility tool that assists you to set up and maintain network devices in a simple and efficient way.
Page 40: Hardware
Chapter 3 Hardware H A P T E R Hardware See the Quick Start Guide for hardware installation and connections. 3.1 Grounding (WAC6552D-S and WAC6553D-E) Earth grounding helps protect against lightning and interference. Note: The power installation must be performed by qualified service personnel and should conform to the National Electrical Code.
Page 41: Zyxel Device Models With Single Leds
Chapter 3 Hardware Figure 15 Grounding Example 3.2 Zyxel Device Models With Single LEDs The LEDs of some Zyxel Device models can be controlled by using the suppression feature such that the LEDs stay lit (ON) or OFF after the Zyxel Device is ready. Some Zyxel Device models also has Locator LED which allows you to see the actual location of the Zyxel Device among several devices in the network.
Page 42: Nwa1123-Acv2
Chapter 3 Hardware 3.3.1 NWA1123-ACv2 Figure 16 NWA1123-ACv2 LED The following are the LED descriptions for your NWA1123-ACv2. Table 10 NWA1123-ACv2 LED COLOR STATUS DESCRIPTION Amber Blinks between amber The LED blinks between amber and green alternately when and green alternately (1 the Zyxel Device is booting up or is connecting to the NCC.
Page 43: Wac6303D-S, Nwa1123-Ac Hd And Nwa5123-Ac Hd
Chapter 3 Hardware Table 10 NWA1123-ACv2 LED (continued) COLOR STATUS DESCRIPTION Steady On The Zyxel Device failed to boot up or is experiencing system failure. Slow Blinking (Blink for 3 The Uplink interface is down. times, Off for 3s) Fast Blinking (On for 50 ms, The Zyxel Device is undergoing firmware upgrade.
Page 44 Chapter 3 Hardware Table 11 WAC6303D-S, NWA1123-AC HD and NWA5123-AC HD LED (continued) COLOR STATUS DESCRIPTION Green Slow Blinking (On for 1 The wireless module of the Zyxel Device is disabled or fails, the second, Off for 1 second) Zyxel Device is using default wireless settings, or the Zyxel Device is configured to be managed by NCC but is not yet registered with the NCC.
Page 45: Nwa5123-Ac
Chapter 3 Hardware 3.3.3 NWA5123-AC Figure 18 NWA5123-AC LED The following are the LED descriptions for your NWA5123-AC. Table 12 NWA5123-AC LED COLOR STATUS DESCRIPTION Amber Blinks between amber The Zyxel Device is booting up. and green alternately (1 Green second interval).
Page 46: Wac500, Wac500H, Nwa1123Acv3, Nwa110Ax, Nwa210Ax, Wax510D, Wax610D, Wax630S And Wax650S
Chapter 3 Hardware Table 12 NWA5123-AC LED (continued) COLOR STATUS DESCRIPTION Steady On The Zyxel Device failed to boot up or is experiencing system failure. Slow Blinking (Blink for 3 The Uplink interface is down. times, Off for 3s) Fast Blinking (On for 50 ms, The Zyxel Device is undergoing firmware upgrade.
Page 47 Chapter 3 Hardware Figure 20 WAC500H LED The following are the LED descriptions for your WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S. Table 13 WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S LED COLOR STATUS DESCRIPTION Amber Blinks between amber...
Page 48 Chapter 3 Hardware Table 13 WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S LED (continued) COLOR STATUS DESCRIPTION Green Steady On The Zyxel Device is ready for use, the Zyxel Device’s wireless interface is activated, and/or WiFi clients are connected to the Zyxel Device in full power mode (see Table 28 on page 76).
Page 49: Nwa220Ax-6E, Wax620D-6E, And Wax640S-6E
Chapter 3 Hardware 3.3.5 NWA220AX-6E, WAX620D-6E, and WAX640S-6E Figure 21 NWA220AX-6E, WAX620D-6E LED Figure 22 WAX640S-6E LED The following are the LED descriptions for your NWA220AX-6E, WAX620D-6E, and WAX640S-6E. Table 14 NWA220AX-6E, WAX620D-6E, and WAX640S-6E LED COLOR STATUS DESCRIPTION Amber Blinks between amber The Zyxel Device is booting up or is connecting with NCC.
Page 50 Chapter 3 Hardware Table 14 NWA220AX-6E, WAX620D-6E, and WAX640S-6E LED (continued) COLOR STATUS DESCRIPTION Amber Blinks between amber The Zyxel Device is discovering an AC, or is managed by NCC and green alternately 3 but fails to connect with NCC, and is reconnecting with the Green times and then turns solid NCC.
Page 51: Zyxel Device Models With Multiple Leds
Chapter 3 Hardware 3.4 Zyxel Device Models With Multiple LEDs The LEDs of some Zyxel Device models can be controlled by using the suppression feature such that the LEDs stay lit (ON) or OFF after the Zyxel Device is ready. Some Zyxel Device models also has Locator LED which allows you to see the actual location of the Zyxel Device among several devices in the network.
Page 52 Chapter 3 Hardware The following table describes the LEDs. Table 15 NWA1123-AC PRO LEDs COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks between amber The LED blinks between amber and green alternately when and green alternately the Zyxel Device is booting up. Green (1 second interval).
Page 53: Nwa1302-Ac
Chapter 3 Hardware Table 15 NWA1123-AC PRO LEDs (continued) COLOR STATUS DESCRIPTION Locator White Blinking The Locator is activated and will blink to show the actual location of the Zyxel Device between several devices in the network. The Locator function is off. 3.4.2 NWA1302-AC By default, the LEDs automatically turn on when the NWA1302-AC is ready.
Page 54: Wac6502D-E, Wac6502D-S, And Wac6503D-S
Chapter 3 Hardware Table 16 NWA1302-AC LEDs (continued) COLOR STATUS DESCRIPTION Management Green The Zyxel Device is managed by the NCC. Slow Blinking (On for 1 The Zyxel Device is using default WiFi settings, or the Zyxel sec, Off for 1 sec) Device is connected to the NCC but is unregistered with the NCC.
Page 55 Chapter 3 Hardware Figure 25 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs The following table describes the LEDs. Table 17 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks between amber The Zyxel Device is booting up or is connecting to the and green alternately NCC or to an AC.
Page 56: Wac6103D-I
Chapter 3 Hardware Table 17 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs (continued) COLOR STATUS DESCRIPTION Management Green The Zyxel Device is managed by a the NCC or an AC. Slow Blinking (Blink for 3 The Zyxel Device is searching (discovery) for an AC. times, Off for 3s) Slow Blinking (On for 1s, The Zyxel Device is using default WiFi settings, or the Zyxel...
Page 57 Chapter 3 Hardware Figure 26 WAC6103D-I LEDs The following table describes the LEDs. Table 18 WAC6103D-I LEDs COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks between amber The Zyxel Device is booting up. and green alternately Green (1 second interval). Green The Zyxel Device is ready for use. Slow Blinking (On for 1s, The wireless module of the Zyxel Device is disabled or Off for 1s)
Page 58: Wac5302D-S
Chapter 3 Hardware Table 18 WAC6103D-I LEDs (continued) COLOR STATUS DESCRIPTION Management Green The Zyxel Device is managed by an AC or the NCC. Slow Blinking (Blink for 3 The Zyxel Device is searching (discovery) for an AC. times, Off for 3s) Slow Blinking (On for 1s, The Zyxel Device is using default WiFi settings, or the Zyxel Off for 1s)
Page 59 Chapter 3 Hardware Figure 27 WAC5302D-S LEDs The following table describes the LEDs. Table 19 WAC5302D-S LEDs COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks between amber The LED blinks amber and green alternately when the and green alternately WAC is booting up. Green (1 second interval).
Page 60 Chapter 3 Hardware Table 19 WAC5302D-S LEDs (continued) COLOR STATUS DESCRIPTION UPLINK Amber The port is operating as a 10/100 Mbps connection. Blinking The Zyxel Device is sending/receiving data through the port at 10/100 Mbps. Green The port is operating as a Gigabit connection (1000 Mbps).
Page 61: Web Configurator
H A P T E R Web Configurator 4.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management via internet browser. Use a browser that supports HTML5, such Mozilla Firefox, or Google Chrome, Microsoft Edge. The recommended screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow: •...
Page 62 Chapter 4 Web Configurator Figure 28 Login Page: Cloud mode If a Zyxel Device is in standalone mode and supports NCC, the following page displays. Here, you can watch a tutorial for using the Zyxel Nebula Control Center (NCC) or access the link to the NCC, as shown in the following figure.
Page 63 Chapter 4 Web Configurator Figure 30 Login Page in Standalone Mode Enter the user name (default: “admin”) and password (default: “1234”). Note: If the Zyxel Device is being managed or has been managed by the NCC, check Local credentials in the NCC's Site-Wide > Configure > General settings screen for the Zyxel Device's current password.
Page 64: Navigating The Web Configurator
Chapter 4 Web Configurator Figure 31 Update Admin Info Screen The Update Admin Info screen appears every time you log in using the default user name and default password. If you change the password for the default user account, this screen does not appear anymore.
Page 65: Title Bar
Chapter 4 Web Configurator Figure 33 The Web Configurator’s Main Screen for Cloud Mode The Web Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation Panel • C - Main Window 4.3.1 Title Bar The title bar provides some useful links that always appear over the screens below, regardless of how deep into the Web Configurator you navigate.
Page 66: Navigation Panel
Chapter 4 Web Configurator Figure 35 Site Map CLI Messages Click CLI to look at the CLI commands sent by the Web Configurator. These commands appear in a popup window, such as the following. Figure 36 CLI Messages Click Clear to remove the currently displayed information. Note: See the Command Reference Guide for information about the commands.
Page 67: Standalone Mode Navigation Panel Menus
Chapter 4 Web Configurator Figure 37 Navigation Panel 4.3.3 Standalone Mode Navigation Panel Menus The following are the screens available in standalone mode. Note that some screens may not be available for your Zyxel Device model. See Section 1.2 on page 14 to see which features your Zyxel Device model supports.
Page 68 Chapter 4 Web Configurator Configuration Menu Use the configuration menu screens to configure the Zyxel Device’s features. Table 22 Configuration Menu Screens Summary FOLDER OR LINK FUNCTION Network IP Setting Configure the IP address for the Zyxel Device Ethernet interface. VLAN Manage the Ethernet interface VLAN settings.
Page 69: Cloud Mode Navigation Panel Menus
Chapter 4 Web Configurator Maintenance Menu Use the maintenance menu screens to manage configuration and firmware files, run diagnostics, and reboot or shut down the Zyxel Device. Table 23 Maintenance Menu Screens Summary FOLDER OR LINK FUNCTION File Manager Configuration File Manage and upload configuration files for the Zyxel Device.
Page 70: Tables And Lists
Chapter 4 Web Configurator Maintenance Menu Use the maintenance menu screens to configure the Zyxel Device’s features. Table 25 Maintenance Menu Screens Summary FOLDER OR LINK FUNCTION Shell Script Shell Script Manage and run shell script files for the Zyxel Device. Diagnostics Diagnostics Collect diagnostic information.
Page 71 Chapter 4 Web Configurator Select a column heading cell’s right border and drag to re-size the column. Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time.
Page 72 Chapter 4 Web Configurator 4.3.5.2 Working with Table Entries The tables have icons for working with table entries. A sample is shown next. You can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activate, or deactivate. Figure 38 Common Table Icons Here are descriptions for the most common table icons.
Page 73: Standalone Configuration
Standalone Configuration...
Page 74: Standalone Configuration
H A P T E R Standalone Configuration 5.1 Overview The Zyxel Device is in standalone mode by default. Use the web configurator to manage and configure the Zyxel Device directly. As shown in the following figure, WiFi clients can connect to the Zyxel Device (A) to access network resources.
Page 75 Chapter 5 Standalone Configuration Table 27 Starting and Stopping the Zyxel Device (continued) METHOD DESCRIPTION Using the RESET button If you press the RESET button on the back of the Zyxel Device, the Zyxel Device sets the configuration to its default values and then reboots. See Section 28.6 on page 275 more information.
Page 76: Dashboard
H A P T E R Dashboard 6.1 Overview This screen displays general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs. You can also collapse, refresh, and close individual widgets.
Page 77 Chapter 6 Dashboard Table 28 Dashboard (continued) LABEL DESCRIPTION System Location This field displays the location of the Zyxel Device. Click the icon to open the screen where you can change it. Model Name This field displays the model name of this Zyxel Device. Serial Number This field displays the serial number of this Zyxel Device.
Page 78 Chapter 6 Dashboard Table 28 Dashboard (continued) LABEL DESCRIPTION Current Date/ This field displays the current date and time in the Zyxel Device. The format is yyyy-mm-dd Time hh:mm:ss. Current Login This field displays the user name used to log in to the current session, the amount of User reauthentication time remaining, and the amount of lease time remaining.
Page 79 Chapter 6 Dashboard Table 28 Dashboard (continued) LABEL DESCRIPTION Cloud Control Status This field displays: • The Zyxel Device Internet connection status. • The connection status between the Zyxel Device and NCC. • The Zyxel Device registration status on NCC. Mouse over the circles to display detailed information.
Page 80: Cpu Usage
Chapter 6 Dashboard Table 28 Dashboard (continued) LABEL DESCRIPTION WLAN Interface This displays status information for the WLAN interface. Status Summary Status This displays whether or not the WLAN interface is activated. MAC Address This displays the MAC address of the radio. Radio This indicates the radio number on the Zyxel Device.
Page 81: Memory Usage
Chapter 6 Dashboard The following table describes the labels in this screen. Table 29 Dashboard > CPU Usage LABEL DESCRIPTION The y-axis represents the percentage of CPU usage. time The x-axis shows the time period over which the CPU usage occurred. Refresh Interval Enter how often you want this window to be automatically updated.
Page 82: Setup Wizard
H A P T E R Setup Wizard 7.1 Accessing the Wizard When you log into the Web Configurator for the first time or when you reset the Zyxel Device to its default configuration, the wizard screen displays. Note: If you have already configured the wizard screens and want to open it again, click the Wizard icon on the upper right corner of any Web Configurator screen.
Page 83: Step 2 Password And Uplink Connection
Chapter 7 Setup Wizard Figure 42 Wizard: Time Settings Figure 43 Wizard: Time Settings (with Country option) 7.2.2 Step 2 Password and Uplink Connection Use this screen to configure the Zyxel Device’s system password and IP address. Change Password: Enter a new password and retype it to confirm. Uplink Connection: Select Auto (DHCP) if the Zyxel Device is connected to a router with the DHCP server enabled.
Page 84: Step 3 Ssid
Chapter 7 Setup Wizard Click Prev to return to the previous screen. Click Next to proceed. Click Cancel to close the wizard without saving. Note: The number of characters shown is not an actual representation of your current password. If you click Next without changing password in the New Password and Confirm Password fields, your current password will not be changed.
Page 85 Chapter 7 Setup Wizard 7.2.3.1 Edit SSID Profile Use this screen to configure an SSID profile. The screen varies depending on the security type you selected. • SSID: Enter a descriptive name of up to 32 printable characters for the wireless LAN. •...
Page 86: Step 4 Radio
Chapter 7 Setup Wizard Figure 47 Wizard: SSID: Edit (WPA3-Enterprise) 7.2.4 Step 4 Radio Use this screen to configure the Zyxel Device’s radio transmitter(s). • Band: Select the radio band you want to use on this radio. The radio band is unconfigurable if the Zyxel Device does not support BandFlex (band selection on each radio).
Page 87: Summary
Chapter 7 Setup Wizard Figure 48 Wizard: Radio If the Country you select in Step 1 does not support 6 GHz, the 6G option will gray out, or a warning message will display when you select 6G. Click OK to return to the previous page. Figure 49 Wizard: Invalid Band Warning Message 7.2.5 Summary Use this screen to check whether what you have configured is correct.
Page 88 Chapter 7 Setup Wizard Figure 50 Wizard: Summary NWA/WAC/WAX Series User’s Guide...
Page 89: Monitor
H A P T E R Monitor 8.1 Overview Use the Monitor screens to check status and statistics information. 8.1.1 What You Can Do in this Chapter • The Network Status screen (Section 8.3 on page 90) displays general LAN interface information and packet statistics.
Page 90: Network Status
Chapter 8 Monitor 8.3 Network Status Use this screen to look at general Ethernet interface information and packet statistics. To access this screen, click Monitor > Network Status. Figure 51 Monitor > Network Status The following table describes the labels in this screen. Table 31 Monitor >...
Page 91: Port Statistics Graph
Chapter 8 Monitor Table 31 Monitor > Network Status (continued) LABEL DESCRIPTION Poll Interval Enter how often you want this window to be updated automatically, and click Set Interval. Set Interval Click this to set the Poll Interval the screen uses. Stop Click this to stop the window from updating automatically.
Page 92: Radio List
Chapter 8 Monitor Figure 52 Monitor > Network Status > Switch to Graphic View The following table describes the labels in this screen. Table 32 Monitor > Network Status > Switch to Graphic View LABEL DESCRIPTION General Settings Refresh Interval Enter how often you want this window to be automatically updated.
Page 93 Chapter 8 Monitor Figure 53 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that supports WDS) Figure 54 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that does not support WDS) The following table describes the labels in this screen. Table 33 Monitor >...
Page 94: Ap Mode Radio Information
Chapter 8 Monitor Table 33 Monitor > Wireless > AP Information > Radio List (continued) LABEL DESCRIPTION Upload This displays the total number of packets received by the radio. Download This displays the total number of packets transmitted by the radio. Channel This indicates how much IEEE 802.11 traffic the radio can receive on the channel.
Page 95 Chapter 8 Monitor Figure 55 Monitor > Wireless > AP Information > Radio List > More Information The following table describes the labels in this screen. Table 34 Monitor > Wireless > AP Information > Radio List > More Information LABEL DESCRIPTION SSID Detail...
Page 96: Station List
Chapter 8 Monitor Table 34 Monitor > Wireless > AP Information > Radio List > More Information (continued) LABEL DESCRIPTION SSID Name This displays an SSID associated with this radio. There can be up to eight maximum. BSSID This displays a BSSID associated with this radio. The BSSID is tied to the SSID. Security This displays the security mode in which the SSID is operating.
Page 97: Wds Link Info
Chapter 8 Monitor Table 35 Monitor > Wireless > Station Info (continued) LABEL DESCRIPTION 802.11 Features This displays whether the station supports IEEE802.11r, IEEE 802.11k, IEEE 802.11v or none of the above (N/A). SSID Name This indicates the name of the WiFi network to which the station is connected. A single AP can have multiple SSIDs or networks.
Page 98: Detected Device
Chapter 8 Monitor The following table describes the labels in this screen. Table 36 Monitor > Wireless > WDS Link Info LABEL DESCRIPTION WDS Uplink Info Uplink refers to the WDS link from the repeaters to the root AP. WDS Downlink Downlink refers to the WDS link from the root AP to the repeaters.
Page 99 Chapter 8 Monitor Figure 58 Monitor > Wireless > Detected Device (for Zyxel Device that supports Monitor mode) NWA/WAC/WAX Series User’s Guide...
Page 100 Chapter 8 Monitor Figure 59 Monitor > Wireless > Detected Device (for Zyxel Device that does not support Monitor mode) The following table describes the labels in this screen. Table 37 Monitor > Wireless > Detected Device LABEL DESCRIPTION Discovered APs Rogue AP This shows how many devices are detected as rogue APs.
Page 101: View Log
Chapter 8 Monitor Table 37 Monitor > Wireless > Detected Device (continued) LABEL DESCRIPTION Band This is the frequency band to which the station is connected. Channel ID This indicates the detected device’s channel ID. 802.11 Mode This indicates the 802.11 mode (a/b/g/n/ac/ax) transmitted by the detected device. Security This indicates the encryption method (if any) used by the detected device.
Page 102 Chapter 8 Monitor Figure 60 Monitor > Log > View Log The following table describes the labels in this screen. Table 38 Monitor > Log > View Log LABEL DESCRIPTION Show Filter / Hide Click this button to show or hide the filter settings. Filter The Priority, Source Address, Destination Address, Source Interface, Destination Interface, Protocol, Keyword, and Search fields are only available if the filter settings are shown.
Page 103 Chapter 8 Monitor Table 38 Monitor > Log > View Log (continued) LABEL DESCRIPTION Search This displays when you show the filter. Click this button to update the log using the current filter settings. Email Log Now Click this button to send log messages to the Active e-mail addresses specified in the Send Log To field on the Configuration >...
Page 104: Network
H A P T E R Network 9.1 Overview This chapter describes how you can configure the management IP address and VLAN settings of your Zyxel Device. The Internet Protocol (IP) address identifies a device on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 105 Chapter 9 Network Figure 62 AC managed Network Example Note: The Zyxel Device can be a standalone device or be managed by an AC. AC Discovery and Management The link between AC Discovery-enabled access points proceeds as follows: An Zyxel Device with AC Discovery enabled joins a wired network (receives a dynamic IP address). The Zyxel Device sends out a discovery request, looking for an AC.
Page 106: What You Can Do In This Chapter
Chapter 9 Network Note: The AC needs to have a static IP address. If it is a DHCP client, set the DHCP server to reserve an IP address for the AC. AC management and IP Subnets By default, CAPWAP works only between Zyxel Devices with IP addresses in the same subnet. However, you can configure the Zyxel Device and the AC to use CAPWAP with IP addresses in different subnets by doing the following.
Page 107: Ip Setting
Chapter 9 Network • The NCC Discovery screen (Section 9.6 on page 115) configures the Zyxel Device’s Nebula Control Center (NCC) discovery settings. 9.2 IP Setting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click Configuration >...
Page 108: Vlan
Chapter 9 Network Table 39 Configuration > Network > IP Setting (continued) LABEL DESCRIPTION Enable Stateless Select this to enable IPv6 stateless auto-configuration on the Zyxel Device. The Zyxel Device Address Auto- will generate an IPv6 address itself from a prefix obtained from an IPv6 router in the network. configuration (SLAAC) Link-Local...
Page 109 Chapter 9 Network Figure 65 Management VLAN Setup In the figure above, to access and manage the Zyxel Device from computer A, the Zyxel Device and switch B’s ports to which computer A and the Zyxel Device are connected should be in the same VLAN. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks.
Page 110 Chapter 9 Network Figure 66 Wireless Bridge VLAN ID Example IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network.
Page 111 Chapter 9 Network Figure 67 Configuration > Network > VLAN (for Zyxel Device with multiple Ethernet ports) Figure 68 Configuration > Network > VLAN (for Zyxel Device with one Ethernet port) Each field is described in the following table. Table 40 Configuration > Network > VLAN LABEL DESCRIPTION VLAN Settings...
Page 112 Chapter 9 Network Table 40 Configuration > Network > VLAN (continued) LABEL DESCRIPTION PVID This field displays the PVID of a port. You can click Edit to set the PVID in the Edit Port screen. This only governs the incoming untagged packets. The Zyxel Device will tag packets received on the port with the specified PVID.
Page 113: Storm Control
Chapter 9 Network Table 40 Configuration > Network > VLAN (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. 9.4 Storm Control Traffic storm control limits the number of broadcast and/or multicast packets the Zyxel Device receives on the ports.
Page 114 Chapter 9 Network Note: The AC Discovery settings are not available in all Zyxel Devices. See Section 1.2 on page for more information. If you want to return the Zyxel Device to function in standalone mode, you can do one of the two following options: •...
Page 115: Ncc Discovery
Chapter 9 Network 9.6 NCC Discovery You can manage the Zyxel Device through the Zyxel Nebula Control Center (NCC). Use this screen to configure the proxy server settings if the Zyxel Device is behind a proxy server. To access this screen, click Configuration > Network > NCC Discovery. Figure 71 Configuration >...
Page 116 Chapter 9 Network Table 43 Configuration > Network > NCC Discovery LABEL DESCRIPTION Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX Series User’s Guide...
Page 117: Wireless
H A P T E R Wireless 10.1 Overview This chapter discusses how to configure the WiFi network settings in your Zyxel Device. The following figure provides an example of a WiFi network. Figure 72 Example of a WiFi Network The WiFi network is the part in the blue circle.
Page 118: What You Need To Know
Chapter 10 Wireless 10.1.2 What You Need to Know The following terms and concepts may help as you read this chapter. Station / WiFi Client A station or WiFi client is any WiFi-capable device that can connect to an AP using a WiFi signal. Dynamic Channel Selection (DCS) Dynamic Channel Selection (DCS) is a feature that allows an AP to automatically select the radio channel which it broadcasts.
Page 119 Chapter 10 Wireless Figure 73 Configuration > Wireless > AP Management NWA/WAC/WAX Series User’s Guide...
Page 120 Chapter 10 Wireless Figure 74 Configuration > Wireless > AP Management (for Zyxel Device with multiple Ethernet ports - in Repeater mode) NWA/WAC/WAX Series User’s Guide...
Page 121 Chapter 10 Wireless Figure 75 Configuration > Wireless > AP Management > Setup Wireless Bridge Vlan ID: Wireless Bridge Vlan Setting (for Zyxel Device with multiple Ethernet ports) Each field is described in the following table. Table 44 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting...
Page 122 Chapter 10 Wireless Table 44 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Enable WDS Wireless Not all models support this feature. See Section 1.2 on page 14 for models that support Bridging wireless bridge. If you set the Zyxel Device as a root AP, the radio that’s bridging with the Zyxel Device should be in repeater mode.
Page 123 Chapter 10 Wireless Table 44 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Band This field displays the frequency bands to which the SSID profile is applicable. If the SSID profile is not applicable to the current radio, the SSID profile will not be enabled. You can configure the SSID profile’s applicable frequency bands in the Edit SSID Profile screen (click the Edit button next to the profile).
Page 124: Rogue Ap
Chapter 10 Wireless Table 44 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Remove Select an entry and click this to remove the selected entry. This field is a sequential value. It is not associated with any VLAN ID. Wireless Bridge Enter a VLAN ID for the wireless bridge.
Page 125 Chapter 10 Wireless software. In this example, the attacker now has access to the company network, including sensitive data stored on the file server (C). Figure 76 Rogue AP Example Friendly APs If you have more than one AP in your WiFi network, you should also configure a list of “friendly” APs. Friendly APs are wireless access points that you know are not a threat.
Page 126 Chapter 10 Wireless Figure 77 Configuration > Wireless > Rogue AP (for Zyxel Devices that support Monitor mode) Figure 78 Configuration > Wireless > Rogue AP (for Zyxel Devices that support Rogue AP Detection) NWA/WAC/WAX Series User’s Guide...
Page 127: Add/Edit Rogue/Friendly List
Chapter 10 Wireless Each field is described in the following table. Table 45 Configuration > Wireless > Rogue AP LABEL DESCRIPTION Rogue AP Detection Setting Enable Rogue AP Select this check box to detect Rogue APs in the network. Detection Suspected Rogue AP Select the check boxes (Weak Security (Open, WEP, WPA-PSK), Hidden SSID, SSID Classification Rule...
Page 128: Load Balancing
Chapter 10 Wireless Each field is described in the following table. Table 46 Configuration > Wireless > Rogue AP > Add/Edit Rogue/Friendly AP List LABEL DESCRIPTION Enter the MAC address of the AP you want to add to the list. A MAC address is a unique hardware identifier in the following hexadecimal format: xx:xx:xx:xx:xx:xx where xx is a hexadecimal number separated by colons.
Page 129: Disassociating And Delaying Connections
Chapter 10 Wireless Each field is described in the following table. Table 47 Configuration > Wireless > Load Balancing LABEL DESCRIPTION Enable Load Select this to enable load balancing on the Zyxel Device. Balancing Use this section to configure wireless network traffic load balancing between the managed APs in this group.
Page 130 Chapter 10 Wireless throughput is lowered or the client connection is picked up by another AP. If the client is picked up by another AP then the original AP cannot resume the connection. For example, here the AP has a balanced bandwidth allotment of 6 Mbps. If laptop R connects and it pushes the AP over its allotment, say to 7 Mbps, then the AP delays the red laptop’s connection until it can afford the bandwidth or the laptop is picked up by a different AP with bandwidth to spare.
Page 131: Dcs
Chapter 10 Wireless 10.5 DCS Use this screen to configure dynamic radio channel selection (see Dynamic Channel Selection (DCS) on page 118). Click Configuration > Wireless > DCS to access this screen. Figure 83 Configuration > Wireless > DCS Each field is described in the following table. Table 48 Configuration >...
Page 132 Chapter 10 Wireless Figure 84 An Example Three-Channel Deployment Three channels are situated in such a way as to create almost no interference with one another if used exclusively: 1, 6 and 11. When an AP broadcasts on any of these 3 channels, it should not interfere with neighboring APs as long as they are also limited to same trio.
Page 133 Chapter 10 Wireless available bandwidth to the point where each connecting device receives a meager trickle, the load balanced AP instead limits the incoming connections as a means to maintain bandwidth integrity. There are three kinds of wireless load balancing available on the Zyxel Device: Load balancing by station number limits the number of devices allowed to connect to your AP.
Page 134: Bluetooth
H A P T E R Bluetooth 11.1 Overview Use this screen to configure the iBeacon advertising settings for the Zyxel Device that supports Bluetooth Low Energy (BLE). Bluetooth Low Energy, which is also known as Bluetooth Smart, transmits less data over a shorter distance but consumes less power than classic Bluetooth.
Page 135: Bluetooth Advertising Settings
Chapter 11 Bluetooth 11.2 Bluetooth Advertising Settings The Zyxel Device communicates with another BLE enabled device for advertisements. Use this screen to configure up to five beacon IDs to be included in the advertising packet. To access this screen, click Configuration > Bluetooth > Advertising Settings. Figure 87 Configuration >...
Page 136 Chapter 11 Bluetooth Figure 88 Configuration > Bluetooth > Advertising Settings > Edit The following table describes the labels in this screen. Table 50 Configuration > Bluetooth > Advertising Settings > Edit LABEL DESCRIPTION Activate Select this option to enable the advertising settings. UUID To specify a UUID for the Zyxel Device’s beacon ID, enter 32 hexadecimal digits in the range of “A-F”, “a-f”...
Page 137: User
H A P T E R User 12.1 Overview This chapter describes how to set up user accounts and user settings for the Zyxel Device. 12.1.1 What You Can Do in this Chapter • The User screen (see Section 12.2 on page 138) provides a summary of all user accounts.
Page 138: User Summary
Chapter 12 User 12.2 User Summary The User screen provides a summary of all user accounts. To access this screen click Configuration > Object > User. Figure 89 Configuration > Object > User The following table describes the labels in this screen. Table 52 Configuration >...
Page 139 Chapter 12 User The first character must be alphabetical (A-Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user 'bob' but use 'BOB' when connecting via CIFS or FTP, it will use the account settings used for 'BOB' not ‘bob’.
Page 140: Setting
Chapter 12 User Table 53 Configuration > User > User > Add/Edit A User (continued) LABEL DESCRIPTION Authentication This field is not available if the user type is user. Timeout Settings If you want to set authentication timeout to a value other than the default settings, select Use Manual Settings then fill your preferred values in the fields that follow.
Page 141 Chapter 12 User Figure 91 Configuration > Object > User > Setting The following table describes the labels in this screen. Table 54 Configuration > Object > User > Setting LABEL DESCRIPTION User Default Setting Default Authentication These authentication timeout settings are used by default when you create a new Timeout Settings user account.
Page 142: Edit User Authentication Timeout Settings
Chapter 12 User Table 54 Configuration > Object > User > Setting (continued) LABEL DESCRIPTION Reauthentication Time This is the default reauthentication time in minutes for each type of user account. It defines the number of minutes the user can be logged into the Zyxel Device in one session before having to log in again.
Page 143 Chapter 12 User Figure 92 User > Setting > Edit User Authentication Timeout Settings The following table describes the labels in this screen. Table 55 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User Type This read-only field identifies the type of user account for which you are configuring the default settings.
Page 144: Ap Profile
H A P T E R AP Profile 13.1 Overview This chapter shows you how to configure preset profiles for the Zyxel Device. 13.1.1 What You Can Do in this Chapter • The Radio screen (Section 13.2 on page 147) creates radio configurations that can be used by the APs.
Page 145 Chapter 13 AP Profile WEP (Wired Equivalent Privacy) encryption scrambles all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications private. Both the wireless stations and the access points must use the same WEP key for data encryption and decryption. WPA2 WPA2 (IEEE 802.11i) is a WiFi security standard that defines stronger encryption, authentication and key management than WPA.
Page 146 Chapter 13 AP Profile • 1024-QAM (Quadrature Amplitude Modulation) – enhances the data capacity of each transmission unit. • 160 MHz Channel Bandwidth – extends the supported channel bandwidth to 160 MHz, providing higher data throughput. Enhanced Air Time Utilization WiFi 6 increases transmission performance in high-density environments that have multiple client devices with the following features: •...
Page 147: Radio
Chapter 13 AP Profile WiFi 6E MBSSID Beacon Management The Zyxel Device supports MBSSID (see Section 1.4.1 on page 27), which allows you to create multiple virtual WiFi networks (SSIDs) on the Zyxel Device. With the WiFi 6E (802.11ax-extended) standard, the Zyxel Device divides SSIDs into groups, and includes information of all SSIDs in a group in one SSID beacon.
Page 148: Add/Edit Radio Profile
Chapter 13 AP Profile The following table describes the labels in this screen. Table 57 Configuration > Object > AP Profile > Radio LABEL DESCRIPTION Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile.
Page 149 Chapter 13 AP Profile Figure 94 Configuration > Object > AP Profile > Radio > Add/Edit NWA/WAC/WAX Series User’s Guide...
Page 150 Chapter 13 AP Profile The following table describes the labels in this screen. Table 58 Configuration > Object > AP Profile > Radio > Add/Edit LABEL DESCRIPTION Hide / Show Click this to hide or show the Advanced Settings in this window. Advanced Settings General Settings Activate...
Page 151 Chapter 13 AP Profile Table 58 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION Channel This is the radio channel which the signal will use for broadcasting by this radio profile. Selection • DCS: Choose Dynamic Channel Selection to have the Zyxel Device choose a radio channel that has least interference.
Page 152 Chapter 13 AP Profile Table 58 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION 5 GHz Channel Select how you want to specify the channels the Zyxel Device switches between for 5 GHz Selection Method operation.
Page 153 Chapter 13 AP Profile Table 58 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION Enable A-MPDU This field is not available when you set 802.11 Mode to 11a or 11b/g. Aggregation Select this to enable A-MPDU aggregation. Message Protocol Data Unit (MPDU) aggregation collects Ethernet frames along with their 802.11n headers and wraps them in a 802.11n MAC header.
Page 154 Chapter 13 AP Profile Table 58 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION Disassociate High, Standard and Low stand for disassociate aggressiveness levels. Aggressiveness You can set the Disassociate Aggressiveness to different levels to decide when the Zyxel Device disconnects a WiFi client with a poor signal strength from the connected AP.
Page 155: Ssid
Chapter 13 AP Profile Table 58 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION Minimum WLAN Rate Sets the minimum data rate that 2.4 Ghz WiFi clients can connect at. At the time of writing, Control Setting the allowed values are: 1, 2, 5.
Page 156: Add/Edit Ssid Profile
Chapter 13 AP Profile Figure 96 Configuration > Object > AP Profile > SSID > SSID List (After wizard setup) The following table describes the labels in this screen. Table 59 Configuration > Object > AP Profile > SSID > SSID List LABEL DESCRIPTION Click this to add a new SSID profile.
Page 157 Chapter 13 AP Profile Figure 97 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile The following table describes the labels in this screen. Table 60 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile LABEL DESCRIPTION Create new...
Page 158 Chapter 13 AP Profile Table 60 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION Security Profile Select a security profile from this list to associate with this SSID. If none exist, you can use the Create new Object menu to create one.
Page 159: Security List
Chapter 13 AP Profile Table 60 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION Enable U-APSD Select this option to enable Unscheduled Automatic Power Save Delivery (U-APSD), which is also known as WMM-Power Save. This helps increase battery life for battery-powered WiFi clients connected to the Zyxel Device using this SSID profile.
Page 160: Add/Edit Security Profile
Chapter 13 AP Profile Table 61 Configuration > Object > AP Profile > SSID > Security List (continued) LABEL DESCRIPTION Remove Click this to remove the selected security profile. This button is not available after you configure the Zyxel Device using the wizard. Object Click this to view which other objects are linked to the selected security profile (for example, Reference...
Page 161 Chapter 13 AP Profile Table 62 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: none (continued) LABEL DESCRIPTION Radius Server Secret Enter the shared secret password of the RADIUS server to be used for authentication. Primary / Secondary Select the check box to enable user accounting through an external authentication Accounting Server...
Page 162 Chapter 13 AP Profile The following table describes the labels in this screen. Table 63 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: enhanced- open LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name.
Page 163 Chapter 13 AP Profile Figure 100 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep The following table describes the labels in this screen. Table 64 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep LABEL DESCRIPTION...
Page 164 Chapter 13 AP Profile Table 64 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep (continued) LABEL DESCRIPTION Authentication Settings Enterprise Select this to enable 802.1X secure authentication with a RADIUS server. ReAuthentication Enter the interval (in seconds) between authentication requests.
Page 165 Chapter 13 AP Profile Table 64 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep (continued) LABEL DESCRIPTION Interim Update Specify the time interval for how often the Zyxel Device is to send a subscriber status Interval update to the accounting server.
Page 166 Chapter 13 AP Profile The following table describes the labels in this screen. Table 65 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes.
Page 167 Chapter 13 AP Profile Table 65 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 (continued) LABEL DESCRIPTION Primary / Secondary Select this to have the Zyxel Device use the specified RADIUS server. Radius Server Activate Radius Server IP Enter the IP address of the RADIUS server to be used for authentication.
Page 168 Chapter 13 AP Profile Figure 102 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix The following table describes the labels in this screen. Table 66 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix LABEL DESCRIPTION...
Page 169 Chapter 13 AP Profile Table 66 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix (continued) LABEL DESCRIPTION Enterprise Select this to enable 802.1X secure authentication with a RADIUS server. ReAuthentication Enter the interval (in seconds) between authentication requests.
Page 170 Chapter 13 AP Profile Table 66 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix (continued) LABEL DESCRIPTION NAS Identifier If the RADIUS server requires the Zyxel Device to provide the NAS (Network Access Server) identifier attribute, enter it here.
Page 171 Chapter 13 AP Profile The following table describes the labels in this screen. Table 67 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes.
Page 172: Mac Filter List
Chapter 13 AP Profile Table 67 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 (continued) LABEL DESCRIPTION Radius Server IP Enter the IP address of the RADIUS server to be used for authentication. Address Radius Server Port Enter the port number of the RADIUS server to be used for authentication.
Page 173: Add/Edit Mac Filter Profile
Chapter 13 AP Profile Figure 104 Configuration > Object > AP Profile > SSID > MAC Filter List The following table describes the labels in this screen. Table 68 Configuration > Object > AP Profile > SSID > MAC Filter List LABEL DESCRIPTION Click this to add a new MAC filtering profile.
Page 174: Layer-2 Isolation List
Chapter 13 AP Profile The following table describes the labels in this screen. Table 69 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes.
Page 175: Add/Edit Layer-2 Isolation Profile
Chapter 13 AP Profile MAC addresses that are not listed in the layer-2 isolation table are blocked from communicating with the Zyxel Device’s WiFi clients except for broadcast packets. Layer-2 isolation does not check the traffic between WiFi clients that are associated with the same AP. Intra-BSS traffic allows WiFi clients associated with the same AP to communicate with each other.
Page 176 Chapter 13 AP Profile Figure 108 Configuration > Object > AP Profile > SSID > Layer-2 Isolation List > Add/Edit Layer-2 Isolation Profile The following table describes the labels in this screen. Table 71 Configuration > Object > AP Profile > SSID > Layer-2 Isolation List > Add/Edit Layer-2 Isolation Profile LABEL DESCRIPTION...
Page 177: Mon Profile
H A P T E R MON Profile 14.1 Overview This screen allows you to set up monitor mode configurations that allow your Zyxel Device to scan for other wireless devices in the vicinity. Once detected, you can use the Wireless > MON Mode screen (Section 10.3 on page 124) to classify them as either rogue or friendly.
Page 178: Add/Edit Mon Profile
Chapter 14 MON Profile Table 72 Configuration > Object > MON Profile (continued) LABEL DESCRIPTION Object Click this to view which other objects are linked to the selected monitor mode profile (for Reference example, an AP management profile). This field is a sequential value, and it is not associated with a specific profile. Status This field shows whether or not the entry is activated.
Page 179 Chapter 14 MON Profile The following table describes the labels in this screen. Table 73 Configuration > Object > MON Profile > Add/Edit MON Profile LABEL DESCRIPTION Activate Select this to activate this monitor mode profile. Profile Name This field indicates the name assigned to the monitor mode profile. Channel dwell time Enter the interval (in milliseconds) before the Zyxel Device switches to another channel for monitoring.
Page 180: Wds Profile
H A P T E R WDS Profile 15.1 Overview This chapter shows you how to configure WDS (Wireless Distribution System) profiles for the Zyxel Device to form a WDS with other APs. 15.1.1 What You Can Do in this Chapter The WDS Profile screen (Section 15.2 on page 180) creates preset WDS configurations that can be used...
Page 181: Add/Edit Wds Profile
Chapter 15 WDS Profile 15.2.1 Add/Edit WDS Profile This screen allows you to create a new WDS profile or edit an existing one. To access this screen, click the Add button or select and existing profile and click the Edit button. Figure 112 Configuration >...
Page 182: Certificates
H A P T E R Certificates 16.1 Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 16.1.1 What You Can Do in this Chapter •...
Page 183 Chapter 16 Certificates Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny’s public key to verify the message. The Zyxel Device uses certificates based on public-key cryptology to authenticate users attempting to establish a connection, not to encrypt the data that you send after establishing a connection. The method used to secure the data that you send through an established connection depends on the type of connection.
Page 184: Verifying A Certificate
Chapter 16 Certificates • Binary PKCS#12: This is a format for transferring public key and private key certificates.The private key in a PKCS #12 file is within a password-encrypted envelope. The file’s password is not connected to your certificate’s public or private passwords. Exporting a PKCS #12 file creates this and you must provide it to decrypt the contents when you import the file into the Zyxel Device.
Page 185: My Certificates
Chapter 16 Certificates 16.2 My Certificates Click Configuration > Object > Certificate > My Certificates to open this screen. This is the Zyxel Device’s summary list of certificates and certification requests. Figure 113 Configuration > Object > Certificate > My Certificates The following table describes the labels in this screen.
Page 186: Add My Certificates
Chapter 16 Certificates Table 76 Configuration > Object > Certificate > My Certificates (continued) LABEL DESCRIPTION Issuer This field displays identifying information about the certificate’s issuing certification authority, such as a common name, organizational unit or department, organization or company and country.
Page 187 Chapter 16 Certificates The following table describes the labels in this screen. Table 77 Configuration > Object > Certificate > My Certificates > Add LABEL DESCRIPTION Name Type a name to identify this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Page 188: Edit My Certificates
Chapter 16 Certificates Table 77 Configuration > Object > Certificate > My Certificates > Add (continued) LABEL DESCRIPTION Click OK to begin certificate or certification request generation. Cancel Click Cancel to quit and return to the My Certificates screen. If you configured the Add My Certificates screen to have the Zyxel Device enroll a certificate and the certificate enrollment is not successful, you see a screen with a Return button that takes you back to the Add My Certificates screen.
Page 189 Chapter 16 Certificates Figure 115 Configuration > Object > Certificate > My Certificates > Edit NWA/WAC/WAX Series User’s Guide...
Page 190 Chapter 16 Certificates The following table describes the labels in this screen. Table 78 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Page 191: Import Certificates
Chapter 16 Certificates Table 78 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Basic Constraint This field displays general information about the certificate. For example, Subject Type=CA means that this is a certification authority’s certificate and “Path Length Constraint=1” means that there can only be one certification authority in the certificate’s path.
Page 192: Trusted Certificates
Chapter 16 Certificates Figure 116 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. Table 79 Configuration > Object > Certificate > My Certificates > Import LABEL DESCRIPTION File Type in the location of the file you want to upload in this field or click Browse to find it. You cannot import a certificate with the same name as a certificate that is already in the Zyxel Device.
Page 193: Edit Trusted Certificates
Chapter 16 Certificates Figure 117 Configuration > Object > Certificate > Trusted Certificates The following table describes the labels in this screen. Table 80 Configuration > Object > Certificate > Trusted Certificates LABEL DESCRIPTION PKI Storage Space This bar displays the percentage of the Zyxel Device’s PKI storage space that is currently in use. in Use When the storage space is almost full, you should consider deleting expired or unnecessary certificates before adding more certificates.
Page 194 Chapter 16 Certificates authority. Figure 118 Configuration > Object > Certificate > Trusted Certificates > Edit NWA/WAC/WAX Series User’s Guide...
Page 195 Chapter 16 Certificates The following table describes the labels in this screen. Table 81 Configuration > Object > Certificate > Trusted Certificates > Edit LABEL DESCRIPTION Configuration Name This field displays the identifying name of this certificate. You can change the name. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Page 196: Import Trusted Certificates
Chapter 16 Certificates Table 81 Configuration > Object > Certificate > Trusted Certificates > Edit (continued) LABEL DESCRIPTION Signature Algorithm This field displays the type of algorithm that was used to sign the certificate. Some certification authorities use rsa-pkcs1-sha1 (RSA public-private key encryption algorithm and the SHA1 hash algorithm).
Page 197: Technical Reference
Chapter 16 Certificates Figure 119 Configuration > Object > Certificate > Trusted Certificates > Import The following table describes the labels in this screen. Table 82 Configuration > Object > Certificate > Trusted Certificates > Import LABEL DESCRIPTION File Type in the location of the file you want to upload in this field or click Browse to find it. You cannot import a certificate with the same name as a certificate that is already in the Zyxel Device.
Page 198: System
H A P T E R System 17.1 Overview Use the system screens to configure general Zyxel Device settings. 17.1.1 What You Can Do in this Chapter • The Host Name screen (Section 17.2 on page 198) configures a unique name for the Zyxel Device in your network.
Page 199: Power Mode
Chapter 17 System The following table describes the labels in this screen. Table 83 Configuration > System > Host Name LABEL DESCRIPTION System Name Choose a descriptive name to identify your Zyxel Device device. This name can be up to 64 alphanumeric characters long.
Page 200: Date And Time
Chapter 17 System 17.4 Date and Time For effective scheduling and logging, the Zyxel Device system time must be accurate. The Zyxel Device has a software mechanism to set the time manually or get the current time and date from an external server.
Page 201 Chapter 17 System Table 85 Configuration > System > Date/Time (continued) LABEL DESCRIPTION New Date This field displays the last updated date from the time server or the last date configured (yyyy-mm-dd) manually. When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply.
Page 202: Pre-Defined Ntp Time Servers List
Chapter 17 System 17.4.1 Pre-defined NTP Time Servers List When you turn on the Zyxel Device for the first time, the date and time start at 2003-01-01 00:00:00. The Zyxel Device then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers.
Page 203: Www Overview
Chapter 17 System To get the Zyxel Device date and time from a time server: Click System > Date/Time. Select Get from Time Server under Time and Date Setup. Under Time Zone Setup, select your Time Zone from the list. Under Time and Date Setup, enter a Time Server Address.
Page 204: Https
Chapter 17 System 17.5.3 HTTPS You can set the Zyxel Device to use HTTP or HTTPS (HTTPS adds security) for Web Configurator sessions. HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages.
Page 205 Chapter 17 System Figure 126 Configuration > System > WWW > Service Control The following table describes the labels in this screen. Table 87 Configuration > System > WWW > Service Control LABEL DESCRIPTION HTTPS Enable Select the check box to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the Zyxel Device Web Configurator using secure HTTPs connections.
Page 206: Https Example
Chapter 17 System 17.5.5 HTTPS Example If you have not changed the default HTTPS port on the Zyxel Device, then in your browser enter “https:// Zyxel Device IP Address/” as the web site address where “Zyxel Device IP Address” is the IP address or domain name of the Zyxel Device you wish to access.
Page 207 Chapter 17 System Figure 128 Security Certificate 1 (Firefox) 17.5.5.3 Avoiding Browser Warning Messages Here are the main reasons your browser displays warnings about the Zyxel Device’s HTTPS server certificate and what you can do to avoid seeing the warnings: •...
Page 208 Chapter 17 System Figure 129 Trusted Certificates The CA sends you a package containing the CA’s trusted certificate(s), your personal certificate(s) and a password to install the personal certificate(s). 17.5.5.5 Installing a Personal Certificate You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment.
Page 209 Chapter 17 System Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA/WAC/WAX Series User’s Guide...
Page 210 Chapter 17 System Click Finish to complete the wizard and begin the import process. You should see the following screen when the certificate is correctly installed on your computer. 17.5.5.6 Using a Certificate When Accessing the Zyxel Device To access the Zyxel Device via HTTPS: NWA/WAC/WAX Series User’s Guide...
Page 211: Ssh
Chapter 17 System Enter ‘https://Zyxel Device IP Address/’ in your browser’s web address field. When Authenticate Client Certificates is selected on the Zyxel Device, the following screen asks you to select a personal certificate to send to the Zyxel Device. This screen displays even if you only have a single certificate as in the example.
Page 212: How Ssh Works
Chapter 17 System 17.6.1 How SSH Works The following figure is an example of how a secure connection is established between two remote hosts using SSH v1. Figure 131 How SSH v1 Works Example Host Identification The SSH client sends a connection request to the SSH server. The server identifies itself with a host key. The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server.
Page 213: Ssh Implementation On The Zyxel Device
Chapter 17 System 17.6.2 SSH Implementation on the Zyxel Device Your Zyxel Device supports SSH versions 1 and 2 using RSA authentication and four encryption methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the Zyxel Device for management using port 22 (by default).
Page 214: Examples Of Secure Telnet Using Ssh
Chapter 17 System 17.6.5 Examples of Secure Telnet Using SSH This section shows two examples using a command interface and a graphical interface SSH client program to remotely access the Zyxel Device. The configuration and connection steps are similar for most SSH client programs.
Page 215: Ftp
Chapter 17 System Figure 134 SSH Example 2: Log in $ ssh –2 192.168.1.2 The authenticity of host '192.168.1.2 (192.168.1.2)' can't be established. RSA1 key fingerprint is 21:6c:07:25:7e:f4:75:80:ec:af:bd:d4:3d:80:53:d1. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '192.168.1.2' (RSA1) to the list of known hosts. Administrator@192.168.1.2's password: The CLI screen displays next.
Page 216: Snmp
Chapter 17 System 17.8 SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Zyxel Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Zyxel Device through the network. The Zyxel Device supports SNMP version one (SNMPv1), version two (SNMPv2c), and version three (SNMPv3).
Page 217: Supported Mibs
Chapter 17 System • Trap - Used by the agent to inform the manager of some events. 17.8.1 Supported MIBs The Zyxel Device supports MIB II that is defined in RFC-1213 and RFC-1215. The Zyxel Device also supports private MIBs (ZYXEL-ES-CAPWAP.MIB, ZYXEL-ES-COMMON.MIB, ZYXEL-ES-ZyXELAPMgmt.MIB, ZYXEL-ES- PROWLAN.MIB, ZYXEL-ES-RFMGMT.MIB, ZYXEL-ES-SMI.MIB, and ZYXEL-ES-WIRELESS.MIB) to collect information about CPU and memory usage and VPN total throughput.
Page 218: Adding Or Editing An Snmpv3 User Profile
Chapter 17 System The following table describes the labels in this screen. Table 91 Configuration > System > SNMP LABEL DESCRIPTION Enable Select the check box to allow or disallow users to access the Zyxel Device using SNMP. Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management.
Page 219 Chapter 17 System Figure 138 Configuration > System > SNMP > Add The following table describes the labels in this screen. Table 92 Configuration > System > SNMP LABEL DESCRIPTION User Name Select the user name of the user account for which this SNMPv3 user profile is configured. Authentication Select the type of authentication the SNMPv3 user must use to connect to the Zyxel Device using this SNMPv3 user profile.
Page 220: Log And Report
H A P T E R Log and Report 18.1 Overview Use the system screens to configure daily reporting and log settings. 18.1.1 What You Can Do In this Chapter • The Email Daily Report screen (Section 18.2 on page 220) configures how and where to send daily reports and what reports to send.
Page 221 Chapter 18 Log and Report Figure 139 Configuration > Log & Report > Email Daily Report NWA/WAC/WAX Series User’s Guide...
Page 222: Log Setting
Chapter 18 Log and Report The following table describes the labels in this screen. Table 93 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION General Settings Enable Email Select this to send reports by e-mail every day. Daily Report Email Settings Mail Server...
Page 223: Log Setting Screen
Chapter 18 Log and Report The Log Setting tab also controls what information is saved in each log. For the system log, you can also specify which log messages are e-mailed, where they are e-mailed, and how often they are e-mailed. For alerts, the Log Setting screen controls which events generate alerts and where alerts are e-mailed.
Page 224: Edit System Log Settings
Chapter 18 Log and Report The following table describes the labels in this screen. Table 94 Configuration > Log & Report > Log Setting LABEL DESCRIPTION Edit Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Page 225 Chapter 18 Log and Report Figure 141 Configuration > Log & Report > Log Setting > Edit System Log Setting NWA/WAC/WAX Series User’s Guide...
Page 226 Chapter 18 Log and Report The following table describes the labels in this screen. Table 95 Configuration > Log & Report > Log Setting > Edit System Log Setting LABEL DESCRIPTION E-Mail Server 1/2 Active Select this to send log messages and alerts according to the information in this section. You specify what kinds of log messages are included in log information and what kinds of log messages are included in alerts in the Active Log and Alert section.
Page 227 Chapter 18 Log and Report Table 95 Configuration > Log & Report > Log Setting > Edit System Log Setting (continued) LABEL DESCRIPTION E-mail Server 1 Use the E-Mail Server 1 drop-down list to change the settings for e-mailing logs to e-mail server 1 for all log categories.
Page 228: Edit Remote Server
Chapter 18 Log and Report 18.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. Figure 142 Configuration > Log & Report > Log Setting > Edit Remote Server The following table describes the labels in this screen.
Page 229: Active Log Summary
Chapter 18 Log and Report Table 96 Configuration > Log & Report > Log Setting > Edit Remote Server (continued) LABEL DESCRIPTION Selection Use the Selection drop-down list to change the log settings for all of the log categories. disable all logs (red X) - do not send the remote server logs for any log category. enable normal logs (green check mark) - send the remote server log messages and alerts for all log categories.
Page 230 Chapter 18 Log and Report Figure 143 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) The following table describes the fields in this screen.
Page 231 Chapter 18 Log and Report Table 97 Configuration > Log & Report > Log Setting > Active Log Summary (continued) LABEL DESCRIPTION E-mail Server 2 Use the E-Mail Server 2 drop-down list to change the settings for e-mailing logs to e-mail server 2 for all log categories.
Page 232: File Manager
H A P T E R File Manager 19.1 Overview Configuration files define the Zyxel Device’s settings. Shell scripts are files of commands that you can store on the Zyxel Device and run when you need them. You can apply a configuration file or run a shell script without the Zyxel Device restarting.
Page 233: Configuration File
Chapter 19 File Manager While configuration files and shell scripts have the same syntax, the Zyxel Device applies configuration files differently than it runs shell scripts. This is explained below. Table 98 Configuration Files and Shell Scripts in the Zyxel Device Configuration Files (.conf) Shell Scripts (.zysh) •...
Page 234 Chapter 19 File Manager Once your Zyxel Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making further configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. Configuration File Flow at Restart •...
Page 235 Chapter 19 File Manager The following table describes the labels in this screen. Table 99 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Rename Use this button to change the label of a configuration file on the Zyxel Device. You can only rename manually saved configuration files.
Page 236 Chapter 19 File Manager Table 99 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Apply Use this button to have the Zyxel Device use a specific configuration file. Click a configuration file’s row to select it and click Apply to have the Zyxel Device use that configuration file.
Page 237: Example Of Configuration File Download Using Ftp
Chapter 19 File Manager Table 99 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Last Modified This column displays the date and time that the individual configuration files were last changed or saved. Upload The bottom part of the screen allows you to upload a new or previously saved configuration file Configuration File from your computer to your Zyxel Device.
Page 238: Firmware Package
Chapter 19 File Manager C:\>ftp 192.168.1.2 Connected to 192.168.1.2. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 5 allowed. 220-Local time is now 21:28. Server port: 21. 220-This is a private system - No anonymous login 220 You will be disconnected after 600 minutes of inactivity.
Page 239: Example Of Firmware Upload Using Ftp
Chapter 19 File Manager Figure 146 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen. Table 100 Maintenance > File Manager > Firmware Package LABEL DESCRIPTION Current Version This is the firmware version and the date created. Released Date This is the date that the version of the firmware was created.
Page 240: Shell Script
Chapter 19 File Manager Use an FTP client on your computer to connect to the Zyxel Device. For example, in the Windows command prompt, type ftp 192.168.1.2. Keep the console session connected in order to see when the firmware recovery finishes. Enter your user name when prompted.
Page 241 Chapter 19 File Manager Figure 148 Maintenance > File Manager > Shell Script Each field is described in the following table. Table 101 Maintenance > File Manager > Shell Script LABEL DESCRIPTION Rename Use this button to change the label of a shell script file on the Zyxel Device. You cannot rename a shell script to the name of another shell script in the Zyxel Device.
Page 242 Chapter 19 File Manager Table 101 Maintenance > File Manager > Shell Script (continued) LABEL DESCRIPTION Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA/WAC/WAX Series User’s Guide...
Page 243: Diagnostics
H A P T E R Diagnostics 20.1 Overview Use the diagnostics screen for troubleshooting. 20.1.1 What You Can Do in this Chapter • The Diagnostics screen (Section 20.2 on page 243) generates a file containing the Zyxel Device’s configuration and diagnostic information if you need to provide it to customer support during troubleshooting.
Page 244: Remote Capture
Chapter 20 Diagnostics Figure 150 Maintenance > Diagnostics: Debug Information Collector 20.3 Remote Capture Use this screen to capture network traffic going through the Zyxel Device and output the captured packets to a packet analyzer (also known as network or protocol analyzer) such as Wireshark. If the Zyxel Device is connected to the Zyxel gateway or ZyWALL, you might need to configure the Zyxel gateway or ZyWALL to allow remote capture on the Zyxel Device.
Page 245 Chapter 20 Diagnostics The following table describes the labels in this screen. Table 102 Maintenance > Diagnostics > Remote Capture LABEL DESCRIPTION Server Port Enter the number of the server port you want the packet analyzer to connect to in order to capture traffic going through the Zyxel Device.
Page 246: Leds
H A P T E R LEDs 21.1 Overview The LEDs of your Zyxel Device can be controlled such that they stay lit (ON) or OFF after the Zyxel Device is ready. There are two features that control the LEDs of your Zyxel Device - Locator and Suppression (see Section 1.2 on page 14).
Page 247: Locator Screen
Chapter 21 LEDs Figure 153 Maintenance > LEDs > Suppression The following table describes fields in the above screen. Table 103 Maintenance > LED > Suppression LABEL DESCRIPTION Suppression On If the Suppression On check box is checked, the LEDs of your Zyxel Device will turn off after it’s ready.
Page 248 Chapter 21 LEDs Figure 154 Maintenance > LEDs > Locator The following table describes fields in the above screen. Table 104 Maintenance > LED > Locator LABEL DESCRIPTION Turn On Click Turn On button to activate the locator. The Locator function will show the actual location of the Zyxel Device between several devices in the network.
Page 249: Antenna Switch
H A P T E R Antenna Switch 22.1 Overview Use this screen to adjust coverage depending on the orientation of the antenna. 22.1.1 What You Need To Know Positioning the antennas properly increases the range and coverage area of a wireless LAN. On the Zyxel Device that comes with internal antennas and also has an antenna switch, you can adjust coverage depending on the antenna orientation for the Zyxel Device radios using the web configurator, the command line interface (CLI) or a physical switch.
Page 250 Chapter 22 Antenna Switch Figure 156 Maintenance > Antenna > Antenna Switch (Per Radio) Figure 157 Maintenance > Antenna > Antenna Switch (Per AP) If the Zyxel Device has a physical antenna switch, select the Enable Software Control option to use the Web Configurator to adjust coverage depending on each radio’s antenna orientation for better coverage.
Page 251: Reboot
H A P T E R Reboot 23.1 Overview Use this screen to restart the Zyxel Device. 23.1.1 What You Need To Know If you applied changes in the Web Configurator, these were saved automatically and do not change when you reboot. If you made changes in the CLI, however, you have to use the write command to save the configuration before you reboot.
Page 252: Shutdown
H A P T E R Shutdown 24.1 Overview Use this screen to shut down the Zyxel Device. Always use Maintenance > Shutdown > Shutdown or the shutdown command before you turn off the Zyxel Device or remove the power. Not doing so can cause the firmware to become corrupt.
Page 253: Local Configuration In Cloud Mode
Local Configuration in Cloud Mode...
Page 254: Cloud Mode
H A P T E R Cloud Mode 25.1 Overview The Zyxel Device is managed and provisioned automatically by the NCC (Nebula Control Center) when it is connected to the Internet and has been registered in the NCC. If you need to change the Zyxel Device’s VLAN setting or manually set its IP address, access its simplified web configurator.
Page 255: Dashboard
Chapter 25 Cloud Mode • Maintenance > Diagnostics > Diagnostics • Maintenance > Diagnostics > Remote Capture • Maintenance > Log These screens also have fewer options than those in standalone Zyxel Devices. The rest of the Zyxel Device’s features must be configured through the NCC. 25.3 Dashboard This screen displays general AP information, and client information in widgets that you can re-arrange to suit your needs.
Page 256 Chapter 25 Cloud Mode Table 105 Dashboard (continued) LABEL DESCRIPTION Cloud Control Status This field displays: • The Zyxel Device Internet connection status. • The connection status between the Zyxel Device and NCC. • The Zyxel Device registration status on NCC. Mouse over the circles to display detailed information.
Page 257: Network
H A P T E R Network 26.1 Overview This chapter describes how you can configure the management IP address and VLAN settings of your Zyxel Device in cloud mode. Section 9.1 on page 104 for information about IP addresses. Note: Make sure your VLAN settings allow the Zyxel Device to connect to the Internet so you could manage it with NCC.
Page 258 Chapter 26 Network Figure 162 Configuration > Network > IP Setting Each field is described in the following table. Table 106 Configuration > Network > IP Setting LABEL DESCRIPTION IP Address Assignment Select this to make the interface a DHCP client and automatically get the IP address, Automatically subnet mask, and gateway address from a DHCP server.
Page 259: Vlan
Chapter 26 Network 26.3 VLAN This section discusses how to configure the Zyxel Device’s VLAN settings. See Section 9.3 on page 108 more information about VLAN. Use this screen to configure the VLAN settings for your Zyxel Device. To access this screen, click Configuration >...
Page 260: Maintenance
H A P T E R Maintenance 27.1 Overview When the Zyxel Device is set to work in cloud mode, the Maintenance screens let you mange shell script files on the Zyxel Device, generate a diagnostic file, or view log messages. Chapter 19 on page 232 for information about shell scripts.
Page 261: Diagnostics
Chapter 27 Maintenance Each field is described in the following table. Table 108 Maintenance > Shell Script LABEL DESCRIPTION Rename Use this button to change the label of a shell script file on the Zyxel Device. You cannot rename a shell script to the name of another shell script in the Zyxel Device. Click a shell script’s row to select it and click Rename to open the Rename File screen.
Page 262: Remote Capture
Chapter 27 Maintenance Figure 165 Maintenance > Diagnostics The Debug Information Center screen then displays showing whether the collection is in progress, was successful, or has failed. When the data collection is done, click Download to save the most recent diagnostic file to a computer.
Page 263: View Log
Chapter 27 Maintenance Figure 167 Maintenance > Diagnostics > Remote Capture Figure 168 Maintenance > Diagnostics > Remote Capture (Zyxel Device that supports Wireless Remote Capture) The following table describes the labels in this screen. Table 109 Maintenance > Diagnostics > Remote Capture LABEL DESCRIPTION Server Port...
Page 264 Chapter 27 Maintenance Note: The Email Log Now field will not appear if your Zyxel Device does not support email report. Figure 169 Maintenance > Log > View Log The following table describes the labels in this screen. Table 110 Maintenance > Log > View Log LABEL DESCRIPTION Show Filter / Hide...
Page 265 Chapter 27 Maintenance Table 110 Maintenance > Log > View Log (continued) LABEL DESCRIPTION Search This displays when you show the filter. Click this button to update the log using the current filter settings. Refresh Click this to update the list of logs. Clear Log Click this button to clear the whole log, regardless of what is currently displayed on the screen.
Page 266: Appendices And Troubleshooting
Appendices and Troubleshooting...
Page 267: Troubleshooting
H A P T E R Troubleshooting 28.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LED • Zyxel Device Management, Access, and Login •...
Page 268: Zyxel Device Management, Access, And Login
Chapter 28 Troubleshooting Disconnect and re-connect the power adapter or PoE power injector to the Zyxel Device. If the problem continues, contact the vendor. 28.3 Zyxel Device Management, Access, and Login I forgot the IP address for the Zyxel Device. The default in-band IP address in standalone mode is http://DHCP-assigned IP (when connecting to a DHCP server) or 192.168.1.2.
Page 269 Chapter 28 Troubleshooting If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Try to access the Zyxel Device using another service, such as SSH. If you can access the Zyxel Device, check the remote management settings to find out why the Zyxel Device does not respond to HTTP.
Page 270 Chapter 28 Troubleshooting I enabled NCC Discovery, but the Zyxel Device is still in standalone mode. Make sure your Zyxel Device is registered to the NCC. The Zyxel Device is already registered with NCC, but it is still in standalone mode; it cannot connect to the NCC.
Page 271 Chapter 28 Troubleshooting Make sure that the Zyxel Device and the AC are both in the same subnet. If you have to set them up in different subnets, see AC management and IP Subnets on page 106. I accidentally pressed the Nebula button in the AC’s Web Configurator. How do I undo it? If the Zyxel Device is not registered with the NCC, register it first.
Page 272: Internet Access
Chapter 28 Troubleshooting I cannot upload the firmware uploaded using FTP. The Web Configurator is the recommended method for uploading firmware in standalone mode. For managed Zyxel Devices, using the NCC or AC is recommended. You only need to use FTP if you need to recover the firmware.
Page 273: Wifi Network
Chapter 28 Troubleshooting If the problem continues, contact the network administrator or vendor. 28.5 WiFi Network The WiFi connection is slow or intermittent. The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. • Building Materials: metal doors, aluminum studs. •...
Page 274 Chapter 28 Troubleshooting WEP is extremely insecure. Its encryption can be broken by an attacker, using widely-available software. It is strongly recommended that you use a more effective security mechanism. Use the strongest security mechanism that all the wireless devices in your network support. WPA2 or WPA2-PSK is recommended. The wireless security is not following the re-authentication timer setting I specified.
Page 275: Resetting The Zyxel Device
Chapter 28 Troubleshooting In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicator associated with any Zyxel Devices assigned to the load balancing task. • Check that the AP profile which contains the load balancing settings is correctly assigned to the Zyxel Devices in question.
Page 276: Appendix A Importing Certificates
P P E N D I X Importing Certificates This appendix shows you how to import public key certificates into your web browser. Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as VeriSign, Comodo, or Network Solutions, to name a few, receives a certificate request from a website operator, they confirm that the web domain and contact information in the request match those on public record with a domain name registrar.
Page 277 Appendix A Importing Certificates Export a Certificate If your device’s Web Configurator is set to use SSL certification, then upon browsing with it for the first time, you are presented with a certification error. NWA/WAC/WAX Series User’s Guide...
Page 278 Appendix A Importing Certificates Click Advanced > Proceed to x.x.x.x (unsafe). In the Address Bar, click Not Secure > Certificate (Invalid). NWA/WAC/WAX Series User’s Guide...
Page 279 Appendix A Importing Certificates In the Certificate dialog box, click Details > Copy to File. In the Certificate Export Wizard, click Next. NWA/WAC/WAX Series User’s Guide...
Page 280 Appendix A Importing Certificates Select the format and settings you want to use and then click Next. Type a filename and specify a folder to save the certificate in. Click Next. NWA/WAC/WAX Series User’s Guide...
Page 281 Appendix A Importing Certificates In the Completing the Certificate Export Wizard screen, click Finish. Finally, click OK when presented with the successful certificate export message. Import a Certificate After storing the certificate in your computer (see Export a Certificate), you need to install it as a trusted root certification authority using the following steps: NWA/WAC/WAX Series User’s Guide...
Page 282 Appendix A Importing Certificates Open your web browser, click the menu icon, and click Settings. NWA/WAC/WAX Series User’s Guide...
Page 283 Appendix A Importing Certificates Scroll down and click Advanced to expand the menu. Under Privacy and security, click Manage certificates. NWA/WAC/WAX Series User’s Guide...
Page 284 Appendix A Importing Certificates In the Certificates pop-up screen, click Trusted Root Certification Authorities. Click Import to start the Certificate Import Wizard. Click Next when the wizard pops up, and then on the following screen click Browse. NWA/WAC/WAX Series User’s Guide...
Page 285 Appendix A Importing Certificates Select the certificate file you want to import and click Open. Click Next. NWA/WAC/WAX Series User’s Guide...
Page 286 Appendix A Importing Certificates Confirm the settings displayed and click Finish. If presented with a security warning, click Yes. NWA/WAC/WAX Series User’s Guide...
Page 287 Appendix A Importing Certificates Finally, click OK when you are notified of the successful import. Install a Stand-Alone Certificate File Rather than installing a public key certificate using web browser settings, you can install a stand-alone certificate file if one has been issued to you. Double-click the public key certificate file.
Page 288 Appendix A Importing Certificates Click Next on the first wizard screen, click Place all certificates in the following store, and click Browse. Select Trusted Root Certificate Authorities > OK, and then click Next. NWA/WAC/WAX Series User’s Guide...
Page 289 Appendix A Importing Certificates Confirm the information shown on the final wizard screen and click Finish. If presented with a security warning, click Yes. NWA/WAC/WAX Series User’s Guide...
Page 290 Appendix A Importing Certificates Finally, click OK when you are notified of the successful import. Remove a Certificate in Google Chrome This section shows you how to remove a public key certificate in Google Chrome on Windows 7. Open your web browser, click the menu icon, and click Settings. NWA/WAC/WAX Series User’s Guide...
Page 291 Appendix A Importing Certificates Scroll down and click Advanced to expand the menu. Under Privacy and security, click Manage certificates. In the Certificates pop-up screen, click Trusted Root Certification Authorities. NWA/WAC/WAX Series User’s Guide...
Page 292 Appendix A Importing Certificates Select the certificate you want to remove and click Remove. Click Yes when you see the following warning message. Confirm the details displayed in the warning message and click Yes. Firefox The following example uses Mozilla Firefox on Windows 7. You first have to store the certificate in your computer and then install it as a Trusted Root CA, as shown in the following tutorials.
Page 293 Appendix A Importing Certificates Export a Certificate If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Advanced. Click View Certificate. NWA/WAC/WAX Series User’s Guide...
Page 294 Appendix A Importing Certificates Click Details > Export. Type a filename and click Save. Import a Certificate After storing the certificate in your computer, you need to import it in trusted root certification authorities using the following steps: NWA/WAC/WAX Series User’s Guide...
Page 295 Appendix A Importing Certificates Open Firefox and click Tools > Options. NWA/WAC/WAX Series User’s Guide...
Page 296 Appendix A Importing Certificates In the Options page, click Privacy & Security, scroll to the bottom of the page, and then click View Certificates. In the Certificate Manager, click Authorities > Import. NWA/WAC/WAX Series User’s Guide...
Page 297 Appendix A Importing Certificates Use the Select File dialog box to locate the certificate and then click Open. Select Trust this CA to identify websites and click OK. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox. NWA/WAC/WAX Series User’s Guide...
Page 298 Appendix A Importing Certificates Open Firefox and click Tools > Options. In the Options page, click Privacy & Security, scroll to the bottom of the page, and then click View Certificates. NWA/WAC/WAX Series User’s Guide...
Page 299 Appendix A Importing Certificates In the Certificate Manager, click Authorities and select the certificate you want to remove. Click Delete or Distrust. In the following dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Page 300: Appendix B Ipv6
P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
Page 301 Appendix B IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
Page 302 Appendix B IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
Page 303 Appendix B IPv6 Each DHCP client and server has a unique DHCP Unique IDentifier (DUID), which is used for identification when they are exchanging DHCPv6 messages. The DUID is generated from the MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device.
Page 304 Appendix B IPv6 ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6.
Page 305 Appendix B IPv6 multicast packets and the IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join. MLD Messages A multicast router or switch periodically sends general queries to MLD hosts to update the multicast forwarding table.
Page 306 Appendix B IPv6 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client.
Page 307 Appendix B IPv6 Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. Click Close to exit the Local Area Connection Status screen. Select Start >...
Page 308: Appendix C Customer Support
In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel office for the region in which you bought the device. For Zyxel Communications offices, see https://service-provider.zyxel.com/global/en/contact-us for the latest information.
Page 309 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • https://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd • https://www.zyxel.com/th/th/ Vietnam • Zyxel Communications Corporation-Vietnam Office • https://www.zyxel.com/vn/vi Europe Belarus • Zyxel BY • https://www.zyxel.by Bulgaria • Zyxel България • https://www.zyxel.com/bg/bg/...
Page 310 Appendix C Customer Support Czech Republic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Finland • Zyxel Communications • https://www.zyxel.com/fi/fi/ France • Zyxel France • https://www.zyxel.fr Germany • Zyxel Deutschland GmbH • https://www.zyxel.com/de/de/ Hungary •...
Page 311 Appendix C Customer Support • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spain • Zyxel Communications ES Ltd • https://www.zyxel.com/es/es/ Sweden • Zyxel Communications • https://www.zyxel.com/se/sv/ Switzerland • Studerus AG •...
Page 312 Ecuador • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ South America • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ Middle East Israel • Zyxel Communications Corporation • http://il.zyxel.com/ North America • Zyxel Communications, Inc. - North America Headquarters • https://www.zyxel.com/us/en/ NWA/WAC/WAX Series User’s Guide...
Page 313: Appendix D Legal Information
P P E N D I X Legal Information Copyright Copyright © 2022 by Zyxel and/or its affiliates The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel and/or its affiliates.
Page 314 Appendix D Legal Information interferência prejudicial, mesmo de estações do mesmo Este equipamento opera em caráter secundário, isto é, não tem direito a proteção contra tipo, e não pode causar interferência a sistemas operando em caráter primário. CANADA The following information applies if you use the product within Canada area. Innovation, Science and Economic Development Canada ICES Statement CAN ICES-3 (B)/NMB-3(B) Innovation, Science and Economic Development Canada RSS-GEN &...
Page 315 Appendix D Legal Information Antenna Information ANTENNA MODEL TYPE CONNECTOR 2.4 G GAIN (dBi) 5G/6G GAIN (dBi) REMARK NWA1123-ACv2 PIFA 3.08 PIFA 3.07 PIFA 4.06 (5150~5250 MHz) 3.79 (5725~5850 MHz) PIFA 3.99 (5150~5250 MHz) 3.78 (5725~5850 MHz) NWA1123-AC HD PIFA I-PEX 3 (2400-2483.5 MHz) PIFA...
Page 316 Appendix D Legal Information ANTENNA MODEL TYPE CONNECTOR 2.4 G GAIN (dBi) 5G/6G GAIN (dBi) REMARK WAC5302D-S Loop I-PEX 5.82 (2400-2483.5 MHz) Loop I-PEX 5.02 (2400-2483.5 MHz) PIFA I-PEX 5 (5150-5250 MHz) 5 (5250-5350 MHz) 5 (5470-5725 MHz) 5 (5725-5850 MHz) WAC6303D-S Direction U.FL...
Page 317 Appendix D Legal Information ANTENNA MODEL TYPE CONNECTOR 2.4 G GAIN (dBi) 5G/6G GAIN (dBi) REMARK WAX640S-6E PIFA U.FL 1 dBi U-NII-1:4.86 dBi U-NII-2A:5.93 dBi U-NII-2C:4.08 dBi U-NII-3:5.21 dBi U-NII-5:3.29 dBi U-NII-6:3.34 dBi U-NII-7:2.64 dBi U-NII-8:3.35 dBi WAX620D-6E PIFA U.FL 1 dBi U-NII-1:3.87 dBi U-NII-2A:3.96 dBi...
Page 318 Appendix D Legal Information Informations Antenne MODÈLE D'ANTENNE TYPE CONNECTEUR 2.4 G GAIN (dBi) 5G/6G GAIN (dBi) REMARQUE NWA1123-ACv2 PIFA 3.08 PIFA 3.07 PIFA 4.06 (5150~5250 MHz) 3.79 (5725~5850 MHz) PIFA 3.99 (5150~5250 MHz) 3.78 (5725~5850 MHz) NWA1123-AC HD PIFA I-PEX 3 (2400-2483.5 MHz) PIFA...
Page 319 Appendix D Legal Information MODÈLE D'ANTENNE TYPE CONNECTEUR 2.4 G GAIN (dBi) 5G/6G GAIN (dBi) REMARQUE WAC5302D-S Loop I-PEX 5.82 (2400-2483.5 MHz) Loop I-PEX 5.02 (2400-2483.5 MHz) PIFA I-PEX 5 (5150-5250 MHz) 5 (5250-5350 MHz) 5 (5470-5725 MHz) 5 (5725-5850 MHz) WAC6303D-S Direction U.FL...
Page 320 Appendix D Legal Information MODÈLE D'ANTENNE TYPE CONNECTEUR 2.4 G GAIN (dBi) 5G/6G GAIN (dBi) REMARQUE WAX640S-6E PIFA U.FL 1 dBi U-NII-1:4.86 dBi U-NII-2A:5.93 dBi U-NII-2C:4.08 dBi U-NII-3:5.21 dBi U-NII-5:3.29 dBi U-NII-6:3.34 dBi U-NII-7:2.64 dBi U-NII-8:3.35 dBi WAX620D-6E PIFA U.FL 1 dBi U-NII-1:3.87 dBi U-NII-2A:3.96 dBi...
Page 321 Appendix D Legal Information EUROPEAN UNION and UNITED KINGDOM The following information applies if you use the product within the European Union and United Kingdom. Declaration of Conformity with Regard to EU Directive 2014/53/EU (Radio Equipment Directive, RED) and UK regulation •...
Page 322 Appendix D Legal Information • The band 2400 MHz to 2483.5 MHz is 19.56 mW, • The band 5150 MHz to 5350 MHz is 175.39 mW, • The band 5470 MHz to 5725 MHz is 826.04 mW. WAX650S • The band 2,400 MHz to 2,483.5 MHz is 91.2 mW, •...
Page 323 Appendix D Legal Information Italiano (Italian) Con la presente Zyxel dichiara che questo attrezzatura è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 2014/53/EU. National Restrictions • This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy.
Page 324 RF exposure requirement. External antenna Use only the antennas which have been approved by Zyxel Communications Corporation. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of FCC/IC limit and is prohibited.
Page 325 Appendix D Legal Information Safety Warnings • Do not use this product near water, for example, in a wet basement or near a swimming pool. • Do not expose your device to dampness, dust or corrosive liquids. • Do not store things on the device. •...
Page 326 Appendix D Legal Information 台灣以下訊息僅適用於產品具有無線功能且銷售至台灣地區 • 取得審驗證明之低功率射頻器材，非經核准，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。 • 低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前述合法通信，指依電信管理法規定作業之無線電通信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 • 使用無線產品時，應避免影響附近雷達系統之操作。 • 高增益指向性天線只得應用於固定式點對點系統。以下訊息僅適用於產品屬於專業安裝並銷售至台灣地區本器材須經專業工程⼈員安裝及設定，始得設置使用，且不得直接販售給⼀般消費者。安全警告 - 為了您的安全，請先閱讀以下警告及指示 : • 請勿將此產品接近水、火焰或放置在高溫的環境。 • 避免設備接觸任何液體 - 切勿讓設備接觸水、雨水、高濕度、污水腐蝕性的液體或其他水份。 • 灰塵及污物 - 切勿接觸灰塵、污物、沙土、食物或其他不合適的材料。 • 雷雨天氣時，不要安裝，使用或維修此設備。有遭受電擊的風險。 • 切勿重摔或撞擊設備，並勿使用不正確的電源變壓器。 • 若接上不正確的電源變壓器會有爆炸的風險。 • 請勿隨意更換產品內的電池。 • 如果更換不正確之電池型式，會有爆炸的風險，請依製造商說明書處理使用過之電池。...
Page 327 Appendix D Legal Information Explanation of the Symbols SYMBOL EXPLANATION Alternating current (AC): AC is an electric current in which the flow of electric charge periodically reverses direction. Direct current (DC): DC if the unidirectional flow or movement of electric charge carriers. Earth;...
Page 328: Index
Index Index Symbols BLE, see Bluetooth Low Energy BLE. See Bluetooth Low Energy advertisements advertising settings Bluetooth Low Energy 15, 17, 18, 20, 21, 134 Numbers Bluetooth Smart iBeacon iBeacon ID 802.11k 15, 17, 18, 20, 21 major 802.11r 15, 17, 18, 20, 21 minor 802.11v 15, 17, 18, 20, 21...
Page 329 Index self-signed customer support 183, 187 serial number 190, 195 storage space 185, 193 thumbprint algorithms thumbprints used for authentication date verifying fingerprints daylight savings certification requests certifications viewing DHCP and domain name channel diagnostics 243, 261 39, 66 button disclaimer messages domain name...
Page 330 Index link-local address 39, 215 and certificates Neighbor Discovery Protocol with Transport Layer Security (TLS) ping prefix prefix length stateless autoconfiguration unspecified address Guide CLI Reference Java permissions JavaScripts HTTP over SSL, see HTTPS redirect to HTTPS vs HTTPS HTTPS and certificates key pairs authenticating clients...
Page 331 Index system types of pop-up windows power off power on product registration MAC address Public-Key Infrastructure (PKI) range public-private key pairs Management Information Base (MIB) 216, 217 Management Mode CAPWAP and DHCP management mode Management, NCC radio Management, Standalone Radio Frequency monitor managing the device reboot 74, 251...
Page 332 Index and users station limitations statistics timeouts daily e-mail report Service Set status Service Set Identifier stopping the device see SSID supported browsers shell scripts syslog 224, 228 downloading 241, 261 syslog servers, see also logs editing 240, 260 system log, see logs how applied system name 76, 199...
Page 333 Index admin (type) security admin, see also admin users SSID and service control wireless security 27, 273 currently logged in wireless station default lease time 141, 143 Wizard Setup default reauthentication time 142, 143 WLAN interface lease time WPA2 limited-admin (type) lockout and certificates reauthentication time...

This manual is also suitable for:

Wac series Wax series Nwa5123-ac hd Wac6103d-i Wac6303d-s Wac6502d-e ... Show all

ZyXEL Communications NWA Series User Manual

Chapter 1 Introduction

Chapter 2 AP Management

Chapter 3 Hardware

Chapter 4 Web Configurator

Chapter 6 Dashboard

Chapter 7 Setup Wizard

Chapter 8 Monitor

Chapter 9 Network

Chapter 10 Wireless

Chapter 11 Bluetooth

Chapter 12 User

Chapter 13 AP Profile

Chapter 14 MON Profile

Chapter 15 WDS Profile

Chapter 16 Certificates

Chapter 18 Log and Report

Chapter 19 File Manager

Chapter 20 Diagnostics

Chapter 21 Leds

Chapter 22 Antenna Switch

Chapter 23 Reboot

Chapter 24 Shutdown

Chapter 25 Cloud Mode

Chapter 26 Network

Chapter 27 Maintenance

Chapter 28 Troubleshooting

Appendix A Importing Certificates

Appendix B Ipv6

Appendix C Customer Support

Appendix D Legal Information

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications NWA Series

Summary of Contents for ZyXEL Communications NWA Series