ZyXEL Communications HD User Manual
ZyXEL Communications HD User Manual

ZyXEL Communications HD User Manual

802.11 a/b/g/n/ac unified access point
Table of Contents

Advertisement

Quick Links

User's Guide
NWA/WAC Series
802.11 a/b/g/n/ac Unified Access Point
Default Login Details
LAN IP Address
User Name
Password
Copyright © 2018 Zyxel Communications Corporation
DHCP-assigned
OR
http://192.168.1.2
admin
1234
Version 5.30 Edition 1, 08/2018

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the HD and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for ZyXEL Communications HD

  • Page 1 User’s Guide NWA/WAC Series 802.11 a/b/g/n/ac Unified Access Point Default Login Details Version 5.30 Edition 1, 08/2018 LAN IP Address DHCP-assigned http://192.168.1.2 User Name admin Password 1234 Copyright © 2018 Zyxel Communications Corporation...
  • Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system.
  • Page 3: Document Conventions

    Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
  • Page 4: Table Of Contents

    Contents Overview Contents Overview User’s Guide ............................. 12 Introduction ............................13 The Web Configurator ......................... 29 Setup Wizard ............................41 Technical Reference ........................47 Dashboard ............................48 Monitor ..............................54 Network ..............................69 Wireless ..............................78 Bluetooth ............................... 91 User ................................. 94 AP Profile ..............................
  • Page 5: Table Of Contents

    1.4.1 WAC6502D-E, WAC6502D-S, and WAC6503D-S ..............21 1.4.2 WAC6103D-I ........................... 22 1.4.3 NWA5123-AC ......................... 24 1.4.4 WAC5302D-S .......................... 24 1.4.5 NWA5123-AC HD and WAC6303D-S ................... 26 1.5 Starting and Stopping the NWA/WAC ..................27 1.6 Grounding (WAC6552D-S and WAC6553D-E) ................27 Chapter 2 The Web Configurator........................
  • Page 6 Table of Contents 3.1 Accessing the Wizard ........................41 3.2 Using the Wizard ..........................41 3.2.1 Step 1 Time Settings ......................41 3.2.2 Step 2 Password and Uplink Connection ................42 3.2.3 Step 3 Radio ......................... 43 3.2.4 Step 4 SSID ..........................44 3.2.5 Summary ..........................
  • Page 7 Table of Contents Chapter 7 Wireless .............................. 78 7.1 Overview ............................78 7.1.1 What You Can Do in this Chapter ..................78 7.1.2 What You Need to Know ..................... 79 7.2 AP Management ..........................79 7.3 Rogue AP ............................82 7.3.1 Add/Edit Rogue/Friendly List ....................
  • Page 8 Table of Contents 10.5.1 Add/Edit MAC Filter Profile ....................117 10.6 Layer-2 Isolation List ........................118 10.6.1 Add/Edit Layer-2 Isolation Profile ..................120 Chapter 11 MON Profile............................121 11.1 Overview ............................. 121 11.1.1 What You Can Do in this Chapter ................... 121 11.2 MON Profile ..........................
  • Page 9 Table of Contents 14.4.1 Service Access Limitations ....................148 14.4.2 System Timeout ........................148 14.4.3 HTTPS ........................... 149 14.4.4 Configuring WWW Service Control ................. 149 14.4.5 HTTPS Example ........................150 14.5 SSH ............................. 158 14.5.1 How SSH Works ........................158 14.5.2 SSH Implementation on the NWA/WAC .................
  • Page 10 Table of Contents 17.1 Overview ............................. 191 17.1.1 What You Can Do in this Chapter ................... 191 17.2 Diagnostics ..........................191 Chapter 18 LEDs ..............................193 18.1 Overview ............................. 193 18.1.1 What You Can Do in this Chapter ................... 193 18.2 Suppression Screen ........................
  • Page 11 Table of Contents Appendix D Legal Information ...................... 236 Index ..............................247 NWA / WAC Series User’s Guide...
  • Page 12: User's Guide

    User’s Guide...
  • Page 13: Introduction

    H A P T E R Introduction 1.1 Overview This User’s Guide covers the following models: NWA5123-AC, NWA5123-AC HD, WAC5302D-S, WAC6103D-I, WAC6303D-S, WAC6502D-E, WAC6502D-S, WAC6503D-S, WAC6552D-S, and WAC6553D-E. Your NWA/WAC is a wireless AP (Access Point). It extends the range of your existing wired network without additional wiring, providing easy network access to mobile users.
  • Page 14 Chapter 1 Introduction Table 1 NWA5000/WAC5000/WAC6000 Series Comparison Table NWA5123-AC FEATURES NWA5123-AC WAC5302D-S WAC6103D-I WAC6303D-S Antenna Switch LED Locator CAPWAP Managed AP Mode AC (AP Controller) Discovery 802.11r Fast Roaming Support in Managed AP Mode 802.11k/v Assisted Roaming Bluetooth Low Energy (BLE) Maximum number of log 512 event logs...
  • Page 15: Management Mode

    Chapter 1 Introduction Table 2 WAC6500 Series Comparison Table FEATURES WAC6502D-E WAC6502D-S WAC6503D-S WAC6552D-S WAC6553D-E CAPWAP Managed AP Mode AC (AP Controller) Discovery 802.11r Fast Roaming Support in Managed AP Mode 802.11k/v Assisted Roaming Bluetooth Low Energy (BLE) Maximum number of 512 event logs or 1024 debug logs log messages You can set the NWA/WAC to operate in either standalone AP or managed AP mode.
  • Page 16: Mbssid

    Chapter 1 Introduction To set the NWA/WAC to be managed by an AP controller in a different subnet or change between management modes, use the AC (AP Controller) Discovery screen (see Section 6.4 on page 76). Table 3 NWA/WAC Management Mode Comparison MANAGEMENT MODE DEFAULT IP ADDRESS UPLOAD FIRMWARE VIA...
  • Page 17: Dual-Radio

    Chapter 1 Introduction Figure 1 Multiple BSSs 1.1.3 Dual-Radio Some of the NWA/WAC models are equipped with dual wireless radios. This means you can configure two different wireless networks to operate simultaneously. Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference.
  • Page 18: Root Ap

    Chapter 1 Introduction Figure 2 Dual-Radio Application 1.1.4 Root AP In Root AP mode, the NWA/WAC (Z) can act as the root AP in a wireless network and also allow repeaters (X and Y) to extend the range of its wireless network at the same time. In the figure below, both clients A, B and C can access the wired network through the root AP.
  • Page 19: Repeater

    Chapter 1 Introduction associate with the NWA/WAC in Root AP mode. A repeater must use the repeater SSID to connect to the NWA/WAC in Root AP mode. When the NWA/WAC is in Root AP mode, repeater security between the NWA/WAC and other repeater is independent of the security between the wireless clients and the AP or repeater.
  • Page 20: Ways To Manage The Nwa/Wac

    Chapter 1 Introduction At the time of writing, repeater security is compatible with the NWA/WAC only. 1.2 Ways to Manage the NWA/WAC You can use the following ways to manage the NWA/WAC. Web Configurator The Web Configurator allows easy NWA/WAC setup and management using an Internet browser. This User’s Guide provides information about the Web Configurator.
  • Page 21: Wac6502D-E, Wac6502D-S, And Wac6503D-S

    Chapter 1 Introduction The WAC6500 also features Locator LED which allows you to see the actual location of the WAC6500 between several devices in the network. Following are LED descriptions for the NWA/WAC series models. 1.4.1 WAC6502D-E, WAC6502D-S, and WAC6503D-S The LEDs will stay ON when the WAC6500 Series is ready.
  • Page 22: Wac6103D-I

    Chapter 1 Introduction Table 4 WAC6500 Series LEDs (continued) COLOR STATUS DESCRIPTION Management Green The WAC AP is managed by a controller. Slow Blinking (Blink for 3 The WAC AP is searching (discovery) for a controller. times, Off for 3s) The WAC AP is in standalone mode.
  • Page 23 Chapter 1 Introduction The following table describes the LEDs. Table 5 WAC6103D-I LEDs COLOR STATUS DESCRIPTION PWR/SYS Slow Blinking (On for 1s, The LED blinks orange and green alternatively when the Off for 1s) NWA/WAC is booting up. Green Green The NWA/WAC is ready for use.
  • Page 24: Nwa5123-Ac

    Chapter 1 Introduction 1.4.3 NWA5123-AC The following are the LED descriptions for your NWA5123-AC. Figure 7 NWA5123-AC LED The following are the LED descriptions for your NWA5123-AC. Table 6 NWA5123-AC LED COLOR STATUS DESCRIPTION Amber Slow Blinking (On for 1s, The LED blinks orange and green alternatively when the NWA is booting Off for 1s) Green...
  • Page 25 Chapter 1 Introduction Figure 8 WAC5302D-S LEDs The following table describes the LEDs. Table 7 WAC5302D-S LEDs COLOR STATUS DESCRIPTION PWR/SYS Slow Blinking (On for 1s, The LED blinks orange and green alternatively when the Off for 1s) WAC is booting up. Green Green The WAC is ready for use.
  • Page 26: Nwa5123-Ac Hd And Wac6303D-S

    The LAN port is not connected. 1.4.5 NWA5123-AC HD and WAC6303D-S The following are the LED descriptions for your NWA/WAC. Figure 9 NWA5123-AC HD and WAC6303D-S LED The following are the LED descriptions for your NWA/WAC. Table 8 NWA5123-AC HD and WAC6303D-S LED...
  • Page 27: Starting And Stopping The Nwa/Wac

    Chapter 1 Introduction Table 8 NWA5123-AC HD and WAC6303D-S LED (continued) COLOR STATUS DESCRIPTION White The NWA/WAC’s wireless interface is activated, but there are no wireless clients connected when it receives power using 802.3af PoE (limited power mode). Blue Slow Blinking (Blink for 1 The NWA/WAC is checking for an available 5GHz channel.
  • Page 28 Chapter 1 Introduction Note: Qualified service personnel must confirm that the protective earthing terminal of the building is a valid terminal. Note: The device must be connected to earth ground to adequately ground the device and protect the operator from electrical hazards. Note: Before connecting the ground, ensure that a qualified service person has attached an appropriate ground lug to the ground cable.
  • Page 29: The Web Configurator

    H A P T E R The Web Configurator 2.1 Overview The NWA/WAC Web Configurator allows easy management using an Internet browser. Browsers supported are: • Firefox 36.0.1 or later • Chrome 41.0 or later • IE 10 or later The recommended screen resolution is 1024 x 768 pixels and higher.
  • Page 30: Navigating The Web Configurator

    2.3 Navigating the Web Configurator The following summarizes how to navigate the web configurator from the Dashboard screen. This guide uses the NWA5123-AC HD screens as an example. The screens may vary slightly for different models. NWA / WAC Series User’s Guide...
  • Page 31: Title Bar

    Chapter 2 The Web Configurator Figure 11 The Web Configurator’s Main Screen The Web Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation Panel • C - Main Window 2.3.1 Title Bar The title bar provides some useful links that always appear over the screens below, regardless of how deep into the Web Configurator you navigate.
  • Page 32 Chapter 2 The Web Configurator Table 10 Title Bar: Web Configurator Icons (continued) LABEL DESCRIPTION Object Click this to open a screen where you can check which configuration items reference an Reference object. Click this to open a popup window that displays the CLI commands sent by the Web Configurator.
  • Page 33 Chapter 2 The Web Configurator Figure 14 Site Map Object Reference Click Object Reference to open the Object Reference screen. Select the type of object and the individual object and click Refresh to show which configuration settings reference the object. Figure 15 Object Reference The fields vary with the type of object.
  • Page 34: Navigation Panel

    Chapter 2 The Web Configurator Table 12 Object References (continued) LABEL DESCRIPTION Service This is the type of setting that references the selected object. Click a service’s name to display the service’s configuration screen in the main window. Priority If it is applicable, this field lists the referencing configuration item’s position in its list, otherwise N/A displays.
  • Page 35 Chapter 2 The Web Configurator Figure 17 Navigation Panel Dashboard The dashboard displays general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs. For details on the Dashboard’s features, see Chapter 4 on page Monitor Menu The monitor menu screens display status and statistics information.
  • Page 36 Chapter 2 The Web Configurator Table 14 Configuration Menu Screens Summary (continued) FOLDER OR LINK FUNCTION Wireless WLAN Setting Manage the NWA/WAC’s general wireless settings. Management Rogue AP Rogue/Friendly AP Configure how the NWA/WAC monitors for rogue APs. List Load Balancing Load Balancing Configure load balancing for traffic moving to and from wireless clients.
  • Page 37: Warning Messages

    Chapter 2 The Web Configurator Maintenance Menu Use the maintenance menu screens to manage configuration and firmware files, run diagnostics, and reboot or shut down the NWA/WAC. Table 15 Maintenance Menu Screens Summary FOLDER OR LINK FUNCTION File Manager Configuration File Manage and upload configuration files for the NWA/WAC.
  • Page 38 Chapter 2 The Web Configurator Click a column heading to sort the table’s entries according to that column’s criteria. Click the down arrow next to a column heading for more options about how to display the entries. The options available vary depending on the type of fields in the column. Here are some examples of what you can do: •...
  • Page 39 Chapter 2 The Web Configurator Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time.
  • Page 40 Chapter 2 The Web Configurator Table 17 Common Table Icons (continued) LABEL DESCRIPTION Remove To remove an entry, select it and click Remove. The NWA/WAC confirms you want to remove it before doing so. Activate To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate.
  • Page 41: Setup Wizard

    H A P T E R Setup Wizard 3.1 Accessing the Wizard When you log into the Web Configurator for the first time or when you reset the NWA/WAC to its default configuration, the wizard screen displays. Note: If you have already configured the wizard screens and want to open it again, click the Wizard icon on the upper right corner of any Web Configurator screen.
  • Page 42: Step 2 Password And Uplink Connection

    Chapter 3 Setup Wizard Figure 19 Wizard: Time Zone 3.2.2 Step 2 Password and Uplink Connection Use this screen to configure the NWA/WAC’s system password and IP address. Change Password: Enter a new password and retype it to confirm. Uplink Connection: Select Auto (DHCP) if the NWA/WAC is connected to a router with the DHCP server enabled.
  • Page 43: Step 3 Radio

    Chapter 3 Setup Wizard Figure 20 Wizard: Uplink 3.2.3 Step 3 Radio Use this screen to configure the NWA/WAC’s radio transmitter(s). • Channel Selection: Select Auto to have the NWA/WAC automatically choose a radio channel that has least interference. Otherwise, select Manual and specify a channel the NWA/WAC will use in the 2.4GHz or 5GHz wireless LAN.
  • Page 44: Step 4 Ssid

    Chapter 3 Setup Wizard Figure 21 Wizard: Radio 3.2.4 Step 4 SSID Use this screen to enable, disable or edit an SSID profile. Select an SSID profile and click the Status switch to turn it on or off. To change an SSID profile’s settings, such as the SSID (WiFi network name) and WiFi password, double-click the SSID profile entry from the list.
  • Page 45 Chapter 3 Setup Wizard The screen varies depending on the security type you selected. • SSID: Enter a descriptive name of up to 32 printable characters for the wireless LAN. • VLAN ID: Enter a VLAN ID for the NWA/WAC to use to tag traffic originating from this SSID. •...
  • Page 46: Summary

    Chapter 3 Setup Wizard Figure 24 Wizard: SSID: Edit (802.1x) 3.2.5 Summary Use this screen to check whether what you have configured is correct. Click Save to apply your settings and complete the wizard setup. Otherwise, click Prev to return to the previous screen or click Cancel to close the wizard without saving.
  • Page 47: Technical Reference

    Technical Reference...
  • Page 48: Dashboard

    H A P T E R Dashboard 4.1 Overview Use the Dashboard screens to check status information about the NWA/WAC. 4.1.1 What You Can Do in this Chapter • The main Dashboard screen (Section 4.2 on page 48) displays the NWA/WAC’s general device information, system status, system resource usage, and interface status.
  • Page 49 Chapter 4 Dashboard The following table describes the labels in this screen. Table 18 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link to re-open closed widgets. Widgets that are already open appear grayed out. Refresh Time Setting Set the interval for refreshing the information displayed in the widget. Refresh Now (C) Click this to update the widget’s information immediately.
  • Page 50 Chapter 4 Dashboard Table 18 Dashboard (continued) LABEL DESCRIPTION Channel This field displays the channel number on the root AP or repeater to which the NWA/WAC is connected using WDS. SSID This field displays the name of the wireless network to which the NWA/WAC is connected using WDS.
  • Page 51: Cpu Usage

    Chapter 4 Dashboard Table 18 Dashboard (continued) LABEL DESCRIPTION Status This field displays the current status of each interface. The possible values depend on what type of interface it is. Inactive - The Ethernet interface is disabled. Down - The Ethernet interface is enabled but not connected. Speed / Duplex - The Ethernet interface is enabled and connected.
  • Page 52: Memory Usage

    Chapter 4 Dashboard Figure 27 Dashboard > CPU Usage The following table describes the labels in this screen. Table 19 Dashboard > CPU Usage LABEL DESCRIPTION The y-axis represents the percentage of CPU usage. time The x-axis shows the time period over which the CPU usage occurred Refresh Interval Enter how often you want this window to be automatically updated.
  • Page 53 Chapter 4 Dashboard The following table describes the labels in this screen. Table 20 Dashboard > Memory Usage LABEL DESCRIPTION The y-axis represents the percentage of RAM usage. time The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated.
  • Page 54: Monitor

    H A P T E R Monitor 5.1 Overview Use the Monitor screens to check status and statistics information. 5.1.1 What You Can Do in this Chapter • The Network Status screen (Section 5.3 on page 55) displays general LAN interface information and packet statistics.
  • Page 55: Network Status

    Chapter 5 Monitor 5.3 Network Status Use this screen to look at general Ethernet interface information and packet statistics. To access this screen, click Monitor > Network Status. Figure 29 Monitor > Network Status The following table describes the labels in this screen. Table 21 Monitor >...
  • Page 56: Port Statistics Graph

    Chapter 5 Monitor Table 21 Monitor > Network Status (continued) LABEL DESCRIPTION Port Statistics Table Poll Interval Enter how often you want this window to be updated automatically, and click Set Interval. Set Interval Click this to set the Poll Interval the screen uses. Stop Click this to stop the window from updating automatically.
  • Page 57: Radio List

    Chapter 5 Monitor Figure 30 Monitor > Network Status > Switch to Graphic View The following table describes the labels in this screen. Table 22 Monitor > Network Status > Switch to Graphic View LABEL DESCRIPTION Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away.
  • Page 58 Chapter 5 Monitor Figure 31 Monitor > Wireless > AP Information > Radio List (for NWA/WAC that supports WDS) Figure 32 Monitor > Wireless > AP Information > Radio List (for NWA/WAC that doesn’t support WDS) The following table describes the labels in this screen. Table 23 Monitor >...
  • Page 59: Ap Mode Radio Information

    Chapter 5 Monitor Table 23 Monitor > Wireless > AP Information > Radio List (continued) LABEL DESCRIPTION Tx Power This displays the output power of the radio. Station This displays the number of wireless clients connected to this radio on the NWA/WAC. This displays the total number of packets received by the radio.
  • Page 60 Chapter 5 Monitor Figure 33 Monitor > Wireless > AP Information > Radio List > More Information The following table describes the labels in this screen. Table 24 Monitor > Wireless > AP Information > Radio List > More Information LABEL DESCRIPTION SSID Detail...
  • Page 61: Station List

    Chapter 5 Monitor Table 24 Monitor > Wireless > AP Information > Radio List > More Information (continued) LABEL DESCRIPTION SSID Name This displays an SSID associated with this radio. There can be up to eight maximum. BSSID This displays a BSSID associated with this radio. The BSSID is tied to the SSID. Security This displays the security mode in which the SSID is operating.
  • Page 62: Wds Link Info

    Chapter 5 Monitor Table 25 Monitor > Wireless > Station Info (continued) LABEL DESCRIPTION 802.11 Features This displays whether the station supports IEEE802.11r, IEEE 802.11k, IEEE 802.11v or none of the above (N/A). SSID Name This indicates the name of the wireless network to which the station is connected. A single AP can have multiple SSIDs or networks.
  • Page 63: Detected Device

    Chapter 5 Monitor The following table describes the labels in this screen. Table 26 Monitor > Wireless > WDS Link Info LABEL DESCRIPTION WDS Uplink Info Uplink refers to the WDS link from the repeaters to the root AP. WDS Downlink Downlink refers to the WDS link from the root AP to the repeaters.
  • Page 64 Chapter 5 Monitor Figure 36 Monitor > Wireless > Detected Device (for NWA/WAC that supports Monitor mode) NWA / WAC Series User’s Guide...
  • Page 65 Chapter 5 Monitor Figure 37 Monitor > Wireless > Detected Device (for NWA/WAC that doesn’t support Monitor mode) The following table describes the labels in this screen. Table 27 Monitor > Wireless > Detected Device LABEL DESCRIPTION Discovered APs Rogue AP This shows how many devices are detected as rogue APs.
  • Page 66: View Log

    Chapter 5 Monitor Table 27 Monitor > Wireless > Detected Device (continued) LABEL DESCRIPTION Mark as Rogue Click this button to mark the selected AP as a rogue AP. For more on managing rogue APs, see the Configuration > Wireless > Rogue AP screen (Section 7.3 on page 82).
  • Page 67 Chapter 5 Monitor Figure 38 Monitor > Log > View Log The following table describes the labels in this screen. Table 28 Monitor > Log > View Log LABEL DESCRIPTION Show Filter / Hide Click this button to show or hide the filter settings. Filter If the filter settings are hidden, the Display, Email Log Now, Refresh, and Clear Log fields are available.
  • Page 68 Chapter 5 Monitor Table 28 Monitor > Log > View Log (continued) LABEL DESCRIPTION Destination This displays when you show the filter. Type the IP address of the destination of the incoming Address packet when the log message was generated. Do not include the port in this filter. Source Interface This displays when you show the filter.
  • Page 69: Network

    H A P T E R Network 6.1 Overview This chapter describes how you can configure the management IP address and VLAN settings of your NWA/WAC. The Internet Protocol (IP) address identifies a device on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
  • Page 70 Chapter 6 Network Figure 40 CAPWAP Network Example Note: The NWA/WAC can be a standalone AP (default), or a CAPWAP managed AP. CAPWAP Discovery and Management The link between CAPWAP-enabled access points proceeds as follows: An AP in managed AP mode joins a wired network (receives a dynamic IP address). The AP sends out a discovery request, looking for a CAPWAP AP controller.
  • Page 71: What You Can Do In This Chapter

    Chapter 6 Network • Broadcasting to discover the controller within the broadcast domain. Note: The AP controller needs to have a static IP address. If it is a DHCP client, set the DHCP server to reserve an IP address for the AP controller. CAPWAP and IP Subnets By default, CAPWAP works only between devices with IP addresses in the same subnet.
  • Page 72: Ip Setting

    Chapter 6 Network 6.2 IP Setting Use this screen to configure the IP address for your NWA/WAC. To access this screen, click Configuration > Network > IP Setting. Figure 42 Configuration > Network > IP Setting Each field is described in the following table. Table 29 Configuration >...
  • Page 73: Vlan

    Chapter 6 Network Table 29 Configuration > Network > IP Setting (continued) LABEL DESCRIPTION IPv6 Address Assignment Enable Stateless Select this to enable IPv6 stateless auto-configuration on the NWA/WAC. The NWA/WAC will Address Auto- generate an IPv6 address itself from a prefix obtained from an IPv6 router in the network. configuration (SLAAC) Link-Local...
  • Page 74 Chapter 6 Network Figure 43 Management VLAN Setup In the figure above, to access and manage the NWA/WAC from computer A, the NWA/WAC and switch B’s ports to which computer A and the NWA/WAC are connected should be in the same VLAN. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks.
  • Page 75 Chapter 6 Network Figure 44 Configuration > Network > VLAN (for NWA/WAC with multiple Ethernet ports) Figure 45 Configuration > Network > VLAN (for NWA/WAC with one Ethernet port) Each field is described in the following table. Table 30 Configuration > Network > VLAN LABEL DESCRIPTION VLAN Settings...
  • Page 76: Ac (Ap Controller) Discovery

    Chapter 6 Network Table 30 Configuration > Network > VLAN (continued) LABEL DESCRIPTION Status This field indicates whether the port is enabled (a yellow bulb) or not (a gray bulb). Port This field displays the name of the port. PVID This field displays the port number of the VLAN ID.
  • Page 77 Chapter 6 Network Figure 46 Configuration > Network > AC Discovery Each field is described in the following table. Table 31 Configuration > Network > AC Discovery LABEL DESCRIPTION Discovery Setting Auto Select this option to use DHCP option 138/DNS SRV record/Broadcast to get the AP controller’s IP address.
  • Page 78: Wireless

    H A P T E R Wireless 7.1 Overview This chapter discusses how to configure the wireless network settings in your NWA/WAC. The following figure provides an example of a wireless network. Figure 47 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients.
  • Page 79: What You Need To Know

    Chapter 7 Wireless 7.1.2 What You Need to Know The following terms and concepts may help as you read this chapter. Station / Wireless Client A station or wireless client is any wireless-capable device that can connect to an AP using a wireless signal.
  • Page 80 Chapter 7 Wireless Figure 48 Configuration > Wireless > AP Management Each field is described in the following table. Table 32 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the check box to enable the NWA/WAC’s first (default) radio. NWA / WAC Series User’s Guide...
  • Page 81 Chapter 7 Wireless Table 32 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Radio 1 OP Mode Select the operating mode for radio 1. AP Mode means the radio can receive connections from wireless clients and pass their data traffic through to the NWA/WAC to be managed (or subsequently passed on to an upstream gateway for managing).
  • Page 82: Rogue Ap

    Chapter 7 Wireless Table 32 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Radio 2 OP Mode This displays if the NWA/WAC has a second radio. Select the operating mode for radio 2. AP Mode means the radio can receive connections from wireless clients and pass their data traffic through to the NWA/WAC to be managed (or subsequently passed on to an upstream gateway for managing).
  • Page 83 Chapter 7 Wireless Figure 49 Configuration > Wireless > Rogue AP (for NWA/WAC that supports Monitor mode) Figure 50 Configuration > Wireless > Rogue AP (for NWA/WAC that doesn’t support Monitor mode) NWA / WAC Series User’s Guide...
  • Page 84: Add/Edit Rogue/Friendly List

    Chapter 7 Wireless Each field is described in the following table. Table 33 Configuration > Wireless > Rogue AP LABEL DESCRIPTION Rogue AP Detection Setting Enable Rogue AP Select this option to detect Rogue APs in the network. Detection Suspected Rogue AP Click the check boxes (Weak Security (Open, WEP, WPA-PSK), Hidden SSID, SSID Classification Rule Keyword) of the characteristics an AP should have for the NWA/WAC to rule it as a...
  • Page 85: Load Balancing

    Chapter 7 Wireless Figure 51 Configuration > Wireless > Rogue AP > Add/Edit Rogue/Friendly AP List Each field is described in the following table. Table 34 Configuration > Wireless > Rogue AP > Add/Edit Rogue/Friendly AP List LABEL DESCRIPTION Enter the MAC address of the AP you want to add to the list. A MAC address is a unique hardware identifier in the following hexadecimal format: xx:xx:xx:xx:xx:xx where xx is a hexadecimal number separated by colons.
  • Page 86 Chapter 7 Wireless Each field is described in the following table. Table 35 Configuration > Wireless > Load Balancing LABEL DESCRIPTION Enable Load Select this to enable load balancing on the NWA/WAC. Balancing Use this section to configure wireless network traffic load balancing between the managed APs in this group.
  • Page 87: Disassociating And Delaying Connections

    Chapter 7 Wireless 7.4.1 Disassociating and Delaying Connections When your AP becomes overloaded, there are two basic responses it can take. The first one is to “delay” a client connection. This means that the AP withholds the connection until the data transfer throughput is lowered or the client connection is picked up by another AP.
  • Page 88: Dcs

    Chapter 7 Wireless Connections are kicked based on either idle timeout or signal strength. The NWA/WAC first looks to see which devices have been idle the longest, then starts kicking them in order of highest idle time. If no connections are idle, the next criteria the NWA/WAC analyzes is signal strength. Devices with the weakest signal strength are kicked first.
  • Page 89 Chapter 7 Wireless Figure 56 An Example Three-Channel Deployment Three channels are situated in such a way as to create almost no interference with one another if used exclusively: 1, 6 and 11. When an AP broadcasts on any of these three channels, it should not interfere with neighboring APs as long as they are also limited to same trio.
  • Page 90 Chapter 7 Wireless available bandwidth to the point where each connecting device receives a meager trickle, the load balanced AP instead limits the incoming connections as a means to maintain bandwidth integrity. There are three kinds of wireless load balancing available on the NWA/WAC: Load balancing by station number limits the number of devices allowed to connect to your AP.
  • Page 91: Bluetooth

    H A P T E R Bluetooth 8.1 Overview Use this screen to configure the Bluetooth advertising settings for the NWA/WAC that supports Bluetooth Low Energy (BLE). Bluetooth Low Energy, which is also known as Bluetooth Smart, transmits less data over a shorter distance and consumes less power than classic Bluetooth.
  • Page 92: Edit Advertising Settings

    Chapter 8 Bluetooth Figure 59 Configuration > Bluetooth > Advertising Settings The following table describes the labels in this screen. Table 37 Configuration > Bluetooth > Advertising Settings LABEL DESCRIPTION Edit Click this to edit the selected entry. Activate To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate.
  • Page 93 Chapter 8 Bluetooth The following table describes the labels in this screen. Table 38 Configuration > Bluetooth > Advertising Settings > Edit LABEL DESCRIPTION Activate Select this option to enable the advertising settings. UUID To specify a UUID of the NWA/WAC’s beacon ID, enter 32 hexadecimal digits in the range of “A-F”, “a-f”...
  • Page 94: User

    H A P T E R User 9.1 Overview This chapter describes how to set up user accounts and user settings for the NWA/WAC. 9.1.1 What You Can Do in this Chapter • The User screen (see Section 9.2 on page 95) provides a summary of all user accounts.
  • Page 95: User Summary

    Chapter 9 User 9.2 User Summary The User screen provides a summary of all user accounts. To access this screen click Configuration > Object > User. Figure 61 Configuration > Object > User The following table describes the labels in this screen. Table 40 Configuration >...
  • Page 96 Chapter 9 User • - [dashes] The first character must be alphabetical (A-Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user 'bob' but use 'BOB' when connecting via CIFS or FTP, it will use the account settings used for 'BOB' not ‘bob’.
  • Page 97: Setting

    Chapter 9 User Table 41 Configuration > User > User > Add/Edit A User (continued) LABEL DESCRIPTION Authentication This field is not available if the user type is user. Timeout Settings If you want to set authentication timeout to a value other than the default settings, select Use Manual Settings then fill your preferred values in the fields that follow.
  • Page 98 Chapter 9 User Figure 63 Configuration > Object > User > Setting The following table describes the labels in this screen. Table 42 Configuration > Object > User > Setting LABEL DESCRIPTION User Default Setting Default Authentication These authentication timeout settings are used by default when you create a new Timeout Settings user account.
  • Page 99: Edit User Authentication Timeout Settings

    Chapter 9 User Table 42 Configuration > Object > User > Setting (continued) LABEL DESCRIPTION Limit the number of Select this check box if you want to set a limit on the number of simultaneous logins simultaneous logons for by admin users. If you do not select this, admin users can login as many times as they administration account want at the same time using the same or different IP addresses.
  • Page 100 Chapter 9 User The following table describes the labels in this screen. Table 43 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User Type This read-only field identifies the type of user account for which you are configuring the default settings.
  • Page 101: Ap Profile

    H A P T E R AP Profile 10.1 Overview This chapter shows you how to configure preset profiles for the NWA/WAC. 10.1.1 What You Can Do in this Chapter • The Radio screen (Section 10.2 on page 102) creates radio configurations that can be used by the APs.
  • Page 102: Radio

    Chapter 10 AP Profile WEP (Wired Equivalent Privacy) encryption scrambles all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications private. Both the wireless stations and the access points must use the same WEP key for data encryption and decryption. WPA2 WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption, authentication and key management than WPA.
  • Page 103: Add/Edit Radio Profile

    Chapter 10 AP Profile Figure 65 Configuration > Object > AP Profile > Radio The following table describes the labels in this screen. Table 44 Configuration > Object > AP Profile > Radio LABEL DESCRIPTION Click this to add a new radio profile. Edit Click this to edit the selected radio profile.
  • Page 104 Chapter 10 AP Profile Figure 66 Configuration > Object > AP Profile > Add/Edit Profile The following table describes the labels in this screen. Table 45 Configuration > Object > AP Profile > Add/Edit Profile LABEL DESCRIPTION Hide / Show Click this to hide or show the Advanced Settings in this window.
  • Page 105 Chapter 10 AP Profile Table 45 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters to be used as this profile’s name. Spaces and underscores are allowed. 802.11 Band Select the wireless band which this radio profile should use.
  • Page 106 Chapter 10 AP Profile Table 45 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION 2.4 GHz Channel This is available when the 2.4 GHz Channel Selection Method is set to auto. Deployment Select Three-Channel Deployment to limit channel switching to channels 1,6, and 11, the three channels that are sufficiently attenuated to have almost no impact on one another.
  • Page 107 Chapter 10 AP Profile Table 45 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION Enable A-MPDU Select this to enable A-MPDU aggregation. This field is not available if you set 802.11 Band Aggregation to 11a or 11b/g. Message Protocol Data Unit (MPDU) aggregation collects Ethernet frames along with their 802.11n headers and wraps them in a 802.11n MAC header.
  • Page 108: Ssid

    Chapter 10 AP Profile Table 45 Configuration > Object > AP Profile > Add/Edit Profile (continued) LABEL DESCRIPTION Transmission Specify how the NWA/WAC handles wireless multicast traffic. Mode Select Multicast to Unicast to broadcast wireless multicast traffic to all of the wireless clients as unicast traffic.
  • Page 109: Add/Edit Ssid Profile

    Chapter 10 AP Profile Figure 68 Configuration > Object > AP Profile > SSID > SSID List (After wizard setup) The following table describes the labels in this screen. Table 46 Configuration > Object > AP Profile > SSID > SSID List LABEL DESCRIPTION Click this to add a new SSID profile.
  • Page 110 Chapter 10 AP Profile Figure 69 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile The following table describes the labels in this screen. Table 47 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile LABEL DESCRIPTION Create new...
  • Page 111 Chapter 10 AP Profile Table 47 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION MAC Filtering Select a MAC filtering profile from the list to associate with this SSID. If none exist, you can use Profile the Create new Object menu to create one.
  • Page 112: Security List

    Chapter 10 AP Profile Table 47 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION Enable Proxy ARP The Address Resolution Protocol (ARP) is a protocol for mapping an IP address to a MAC address.
  • Page 113: Add/Edit Security Profile

    Chapter 10 AP Profile Table 48 Configuration > Object > AP Profile > SSID > Security List (continued) LABEL DESCRIPTION Profile Name This field indicates the name assigned to the security profile. Security Mode This field indicates this profile’s security mode (if any). 10.4.1 Add/Edit Security Profile This screen allows you to create a new security profile or edit an existing one.
  • Page 114 Chapter 10 AP Profile Figure 71 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile NWA / WAC Series User’s Guide...
  • Page 115 Chapter 10 AP Profile The following table describes the labels in this screen. Table 49 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes.
  • Page 116 Chapter 10 AP Profile Table 49 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile (continued) LABEL DESCRIPTION Key Length Select the bit-length of the encryption key to be used in WEP connections. If you select WEP-64: •...
  • Page 117: Mac Filter List

    Chapter 10 AP Profile 10.5 MAC Filter List This screen allows you to create and manage security configurations that can be used by your SSIDs. To access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List. Note: You can have a maximum of 32 MAC filtering profiles on the NWA/WAC.
  • Page 118: Layer-2 Isolation List

    Chapter 10 AP Profile Figure 73 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile The following table describes the labels in this screen. Table 51 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile LABEL DESCRIPTION Profile Name...
  • Page 119 Chapter 10 AP Profile Note: Intra-BSS Traffic Blocking is activated when you enable layer-2 isolation. Figure 74 Layer-2 Isolation Application MAC addresses that are not listed in the layer-2 isolation table are blocked from communicating with the NWA/WAC’s wireless clients except for broadcast packets. Layer-2 isolation does not check the traffic between wireless clients that are associated with the same AP.
  • Page 120: Add/Edit Layer-2 Isolation Profile

    Chapter 10 AP Profile 10.6.1 Add/Edit Layer-2 Isolation Profile This screen allows you to create a new layer-2 isolation profile or edit an existing one. To access this screen, click the Add button or select a layer-2 isolation profile from the list and click the Edit button. Note: You need to know the MAC address of each wireless client, AP, computer or router that you want to allow to communicate with the NWA/WAC's wireless clients.
  • Page 121: Mon Profile

    H A P T E R MON Profile 11.1 Overview This screen allows you to set up monitor mode configurations that allow your NWA/WAC to scan for other wireless devices in the vicinity. Once detected, you can use the Wireless > MON Mode screen (Section 7.3 on page 82) to classify them as either rogue or friendly.
  • Page 122: Add/Edit Mon Profile

    Chapter 11 MON Profile Table 54 Configuration > Object > MON Profile (continued) LABEL DESCRIPTION Object Click this to view which other objects are linked to the selected monitor mode profile (for Reference example, an AP management profile). This field is a sequential value, and it is not associated with a specific profile. Status This field shows whether or not the entry is activated.
  • Page 123: Technical Reference

    Chapter 11 MON Profile The following table describes the labels in this screen. Table 55 Configuration > Object > MON Profile > Add/Edit MON Profile LABEL DESCRIPTION Activate Select this to activate this monitor mode profile. Profile Name This field indicates the name assigned to the monitor mode profile. Channel dwell time Enter the interval (in milliseconds) before the NWA/WAC switches to another channel for monitoring.
  • Page 124 Chapter 11 MON Profile Figure 79 Rogue AP Example In the example above, a corporate network’s security is compromised by a rogue AP (RG) set up by an employee at his workstation in order to allow him to connect his notebook computer wirelessly (A). The company’s legitimate wireless network (the dashed ellipse B) is well-secured, but the rogue AP uses inferior security that is easily broken by an attacker (X) running readily available encryption-cracking software.
  • Page 125: Wds Profile

    H A P T E R WDS Profile 12.1 Overview This chapter shows you how to configure WDS (Wireless Distribution System) profiles for the NWA/WAC to form a WDS with other APs. 12.1.1 What You Can Do in this Chapter The WDS Profile screen (Section 12.2 on page 125) creates preset WDS configurations that can be used...
  • Page 126: Add/Edit Wds Profile

    Chapter 12 WDS Profile 12.2.1 Add/Edit WDS Profile This screen allows you to create a new WDS profile or edit an existing one. To access this screen, click the Add button or select and existing profile and click the Edit button. Figure 81 Configuration >...
  • Page 127: Certificates

    H A P T E R Certificates 13.1 Overview The NWA/WAC can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 13.1.1 What You Can Do in this Chapter •...
  • Page 128 Chapter 13 Certificates Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny’s public key to verify the message. The NWA/WAC uses certificates based on public-key cryptology to authenticate users attempting to establish a connection, not to encrypt the data that you send after establishing a connection. The method used to secure the data that you send through an established connection depends on the type of connection.
  • Page 129: Verifying A Certificate

    Chapter 13 Certificates • Binary PKCS#12: This is a format for transferring public key and private key certificates.The private key in a PKCS #12 file is within a password-encrypted envelope. The file’s password is not connected to your certificate’s public or private passwords. Exporting a PKCS #12 file creates this and you must provide it to decrypt the contents when you import the file into the NWA/WAC.
  • Page 130: My Certificates

    Chapter 13 Certificates 13.2 My Certificates Click Configuration > Object > Certificate > My Certificates to open this screen. This is the NWA/WAC’s summary list of certificates and certification requests. Figure 82 Configuration > Object > Certificate > My Certificates The following table describes the labels in this screen.
  • Page 131: Add My Certificates

    Chapter 13 Certificates Table 58 Configuration > Object > Certificate > My Certificates (continued) LABEL DESCRIPTION Issuer This field displays identifying information about the certificate’s issuing certification authority, such as a common name, organizational unit or department, organization or company and country.
  • Page 132 Chapter 13 Certificates The following table describes the labels in this screen. Table 59 Configuration > Object > Certificate > My Certificates > Add LABEL DESCRIPTION Name Type a name to identify this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
  • Page 133: Edit My Certificates

    Chapter 13 Certificates Table 59 Configuration > Object > Certificate > My Certificates > Add (continued) LABEL DESCRIPTION Create a certification Select this to have the NWA/WAC generate a request for a certificate and apply to a request and enroll for certification authority for a certificate.
  • Page 134 Chapter 13 Certificates Figure 84 Configuration > Object > Certificate > My Certificates > Edit NWA / WAC Series User’s Guide...
  • Page 135 Chapter 13 Certificates The following table describes the labels in this screen. Table 60 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
  • Page 136: Import Certificates

    Chapter 13 Certificates Table 60 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION MD5 Fingerprint This is the certificate’s message digest that the NWA/WAC calculated using the MD5 algorithm. SHA1 Fingerprint This is the certificate’s message digest that the NWA/WAC calculated using the SHA1 algorithm.
  • Page 137: Trusted Certificates

    Chapter 13 Certificates Figure 85 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. Table 61 Configuration > Object > Certificate > My Certificates > Import LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it.
  • Page 138: Edit Trusted Certificates

    Chapter 13 Certificates Figure 86 Configuration > Object > Certificate > Trusted Certificates The following table describes the labels in this screen. Table 62 Configuration > Object > Certificate > Trusted Certificates LABEL DESCRIPTION PKI Storage Space This bar displays the percentage of the NWA/WAC’s PKI storage space that is currently in use. in Use When the storage space is almost full, you should consider deleting expired or unnecessary certificates before adding more certificates.
  • Page 139 Chapter 13 Certificates Figure 87 Configuration > Object > Certificate > Trusted Certificates > Edit NWA / WAC Series User’s Guide...
  • Page 140 Chapter 13 Certificates The following table describes the labels in this screen. Table 63 Configuration > Object > Certificate > Trusted Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can change the name. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
  • Page 141: Import Trusted Certificates

    Chapter 13 Certificates Table 63 Configuration > Object > Certificate > Trusted Certificates > Edit (continued) LABEL DESCRIPTION Valid From This field displays the date that the certificate becomes applicable. The text displays in red and includes a Not Yet Valid! message if the certificate has not yet become applicable. Valid To This field displays the date that the certificate expires.
  • Page 142: Technical Reference

    Chapter 13 Certificates Figure 88 Configuration > Object > Certificate > Trusted Certificates > Import The following table describes the labels in this screen. Table 64 Configuration > Object > Certificate > Trusted Certificates > Import LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it.
  • Page 143: System

    H A P T E R System 14.1 Overview Use the system screens to configure general NWA/WAC settings. 14.1.1 What You Can Do in this Chapter • The Host Name screen (Section 14.2 on page 143) configures a unique name for the NWA/WAC in your network.
  • Page 144: Date And Time

    Chapter 14 System The following table describes the labels in this screen. Table 65 Configuration > System > Host Name LABEL DESCRIPTION System Name Choose a descriptive name to identify your NWA/WAC device. This name can be up to 64 alphanumeric characters long.
  • Page 145 Chapter 14 System Figure 90 Configuration > System > Date/Time The following table describes the labels in this screen. Table 66 Configuration > System > Date/Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the present time of your NWA/WAC. Current Date This field displays the present date of your NWA/WAC.
  • Page 146 Chapter 14 System Table 66 Configuration > System > Date/Time (continued) LABEL DESCRIPTION Get from Time Select this radio button to have the NWA/WAC get the time and date from the time server Server you specify below. The NWA/WAC requests time and date settings from the time server under the following circumstances.
  • Page 147: Pre-Defined Ntp Time Servers List

    Chapter 14 System 14.3.1 Pre-defined NTP Time Servers List When you turn on the NWA/WAC for the first time, the date and time start at 2003-01-01 00:00:00. The NWA/WAC then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers.
  • Page 148: Www Overview

    Chapter 14 System To get the NWA/WAC date and time from a time server: Click System > Date/Time. Select Get from Time Server under Time and Date Setup. Under Time Zone Setup, select your Time Zone from the list. Under Time and Date Setup, enter a Time Server Address. Click Apply.
  • Page 149: Https

    Chapter 14 System 14.4.3 HTTPS You can set the NWA/WAC to use HTTP or HTTPS (HTTPS adds security) for Web Configurator sessions. HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot read the transferred data), authentication (one party can identify the other party) and data integrity (you know if data has been changed).
  • Page 150: Https Example

    Chapter 14 System Figure 94 Configuration > System > WWW > Service Control The following table describes the labels in this screen. Table 68 Configuration > System > WWW > Service Control LABEL DESCRIPTION HTTPS Enable Select the check box to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the NWA/WAC Web Configurator using secure HTTPs connections.
  • Page 151 Chapter 14 System 14.4.5.1 Internet Explorer Warning Messages When you attempt to access the NWA/WAC HTTPS server, you will see the error message shown in the following screen. Figure 95 Security Alert Dialog Box (Internet Explorer) Select Continue to this website. to proceed to the Web Configurator login screen. Otherwise, select Click here to close this webpage.
  • Page 152 Chapter 14 System Figure 96 Security Certificate 1 (Firefox) Figure 97 Security Certificate 2 (Firefox) 14.4.5.3 Avoiding Browser Warning Messages Here are the main reasons your browser displays warnings about the NWA/WAC’s HTTPS server certificate and what you can do to avoid seeing the warnings: •...
  • Page 153 Chapter 14 System • For the browser to trust a self-signed certificate, import the self-signed certificate into your operating system as a trusted certificate. • To have the browser trust the certificates issued by a certificate authority, import the certificate authority’s certificate into your operating system as a trusted certificate.
  • Page 154 Chapter 14 System 14.4.5.5 Installing the CA’s Certificate Double click the CA’s trusted certificate to produce a screen similar to the one shown next. Click Install Certificate and follow the wizard as shown. 14.4.5.6 Installing a Personal Certificate You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment.
  • Page 155 Chapter 14 System Click Next to begin the wizard. The file name and path of the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA / WAC Series User’s Guide...
  • Page 156 Chapter 14 System Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA / WAC Series User’s Guide...
  • Page 157 Chapter 14 System Click Finish to complete the wizard and begin the import process. You should see the following screen when the certificate is correctly installed on your computer. 14.4.5.7 Using a Certificate When Accessing the NWA/WAC To access the NWA/WAC via HTTPS: Enter ‘https://NWA/WAC IP Address/’...
  • Page 158: Ssh

    Chapter 14 System When Authenticate Client Certificates is selected on the NWA/WAC, the following screen asks you to select a personal certificate to send to the NWA/WAC. This screen displays even if you only have a single certificate as in the example. You next see the Web Configurator login screen.
  • Page 159: Ssh Implementation On The Nwa/Wac

    Chapter 14 System Figure 100 How SSH v1 Works Example Host Identification The SSH client sends a connection request to the SSH server. The server identifies itself with a host key. The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server.
  • Page 160: Requirements For Using Ssh

    Chapter 14 System 14.5.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the NWA/WAC over SSH. 14.5.4 Configuring SSH Click Configuration > System > SSH to open the following screen. Use this screen to configure your NWA/ WAC’s Secure Shell settings.
  • Page 161 Chapter 14 System Launch the SSH client and specify the connection information (IP address, port number) for the NWA/ WAC. Configure the SSH client to accept connection using SSH version 2. A window displays prompting you to store the host key in you computer. Click Yes to continue. Figure 102 SSH Example 1: Store Host Key Enter the password to log in to the NWA/WAC.
  • Page 162: Telnet

    Chapter 14 System The CLI screen displays next. 14.6 Telnet You can use Telnet to access the NWA/WAC’s command line interface. Click Configuration > System > TELNET to configure your NWA/WAC for remote Telnet access. Use this screen to enable or disable Telnet and set the server port number.
  • Page 163: Snmp

    Chapter 14 System Figure 106 Configuration > System > FTP The following table describes the labels in this screen. Table 71 Configuration > System > FTP LABEL DESCRIPTION Enable Select the check box to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the NWA/WAC using this service.
  • Page 164: Supported Mibs

    Chapter 14 System Figure 107 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (the NWA/WAC). An agent translates the local management information from the managed device into a form compatible with SNMP.
  • Page 165: Snmp Traps

    Chapter 14 System administrators collect statistical data and monitor status and performance. You can download the NWA/WAC’s MIBs from www.zyxel.com. 14.8.2 SNMP Traps The NWA/WAC will send traps to the SNMP manager when any one of the following events occurs. Table 72 SNMP Traps OBJECT LABEL OBJECT ID...
  • Page 166: Adding Or Editing An Snmpv3 User Profile

    Chapter 14 System Table 73 Configuration > System > SNMP (continued) LABEL DESCRIPTION Community Type the trap community, which is the password sent with each trap to the SNMP manager. The default is public and allows all requests. Destination Type the IP address of the station to send your SNMP traps to. Trap Wireless Select this to have the NWA/WAC send a trap to the SNMP manager when a wireless client is Event...
  • Page 167 Chapter 14 System The following table describes the labels in this screen. Table 74 Configuration > System > SNMP LABEL DESCRIPTION User Name Select the user name of the user account for which this SNMPv3 user profile is configured. Authentication Select the type of authentication the SNMPv3 user must use to connect to the NWA/WAC using this SNMPv3 user profile.
  • Page 168: Log And Report

    H A P T E R Log and Report 15.1 Overview Use the system screens to configure daily reporting and log settings. 15.1.1 What You Can Do In this Chapter • The Email Daily Report screen (Section 15.2 on page 168) configures how and where to send daily reports and what reports to send.
  • Page 169 Chapter 15 Log and Report Figure 110 Configuration > Log & Report > Email Daily Report The following table describes the labels in this screen. Table 75 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION Enable Email Select this to send reports by e-mail every day.
  • Page 170: Log Setting

    Chapter 15 Log and Report Table 75 Configuration > Log & Report > Email Daily Report (continued) LABEL DESCRIPTION SSL/TLS Select SSL/TLS to use Secure Sockets Layer (SSL) or Transport Layer Security (TLS) if you want Encryption encrypted communications between the mail server and the NWA/WAC. Select STARTTLS to upgrade a plain text connection to a secure connection using SSL/TLS.
  • Page 171: Log Setting Screen

    Chapter 15 Log and Report Alternatively, if you want to edit what events is included in each log, you can also use the Active Log Summary screen to edit this information for all logs at the same time. 15.3.1 Log Setting Screen To access this screen, click Configuration >...
  • Page 172: Edit System Log Settings

    Chapter 15 Log and Report Table 76 Configuration > Log & Report > Log Setting (continued) LABEL DESCRIPTION Log Format This field displays the format of the log. Internal - system log; you can view the log on the View Log tab. VRPT/Syslog - Zyxel’s Vantage Report, syslog-compatible format.
  • Page 173 Chapter 15 Log and Report Figure 112 Configuration > Log & Report > Log Setting > Edit System Log Setting NWA / WAC Series User’s Guide...
  • Page 174 Chapter 15 Log and Report The following table describes the labels in this screen. Table 77 Configuration > Log & Report > Log Setting > Edit System Log Setting LABEL DESCRIPTION E-Mail Server 1/2 Active Select this to send log messages and alerts according to the information in this section. You specify what kinds of log messages are included in log information and what kinds of log messages are included in alerts in the Active Log and Alert section.
  • Page 175 Chapter 15 Log and Report Table 77 Configuration > Log & Report > Log Setting > Edit System Log Setting (continued) LABEL DESCRIPTION E-mail Server 1 Use the E-Mail Server 1 drop-down list to change the settings for e-mailing logs to e-mail server 1 for all log categories.
  • Page 176: Edit Remote Server

    Chapter 15 Log and Report 15.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. Figure 113 Configuration > Log & Report > Log Setting > Edit Remote Server NWA / WAC Series User’s Guide...
  • Page 177: Active Log Summary

    Chapter 15 Log and Report The following table describes the labels in this screen. Table 78 Configuration > Log & Report > Log Setting > Edit Remote Server LABEL DESCRIPTION Log Settings for Remote Server Active Select this check box to send log information according to the information in this section. You specify what kinds of messages are included in log information in the Active Log section.
  • Page 178 Chapter 15 Log and Report Figure 114 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) The following table describes the fields in this screen.
  • Page 179 Chapter 15 Log and Report Table 79 Configuration > Log & Report > Log Setting > Active Log Summary (continued) LABEL DESCRIPTION E-mail Server 1 Use the E-Mail Server 1 drop-down list to change the settings for e-mailing logs to e-mail server 1 for all log categories.
  • Page 180: File Manager

    H A P T E R File Manager 16.1 Overview Configuration files define the NWA/WAC’s settings. Shell scripts are files of commands that you can store on the NWA/WAC and run when you need them. You can apply a configuration file or run a shell script without the NWA/WAC restarting.
  • Page 181: Configuration File

    Chapter 16 File Manager While configuration files and shell scripts have the same syntax, the NWA/WAC applies configuration files differently than it runs shell scripts. This is explained below. Table 80 Configuration Files and Shell Scripts in the NWA/WAC Configuration Files (.conf) Shell Scripts (.zysh) •...
  • Page 182 Chapter 16 File Manager Once your NWA/WAC is configured and functioning properly, it is highly recommended that you back up your configuration file before making further configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. Configuration File Flow at Restart •...
  • Page 183 Chapter 16 File Manager The following table describes the labels in this screen. Table 81 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Rename Use this button to change the label of a configuration file on the NWA/WAC. You can only rename manually saved configuration files.
  • Page 184 Chapter 16 File Manager Table 81 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Apply Use this button to have the NWA/WAC use a specific configuration file. Click a configuration file’s row to select it and click Apply to have the NWA/WAC use that configuration file.
  • Page 185: Example Of Configuration File Download Using Ftp

    Chapter 16 File Manager Table 81 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Last Modified This column displays the date and time that the individual configuration files were last changed or saved. Upload The bottom part of the screen allows you to upload a new or previously saved configuration file Configuration File from your computer to your NWA/WAC You cannot upload a configuration file named system-default.conf or lastgood.conf.
  • Page 186: Firmware Package

    Chapter 16 File Manager C:\>ftp 192.168.1.2 Connected to 192.168.1.2. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 5 allowed. 220-Local time is now 21:28. Server port: 21. 220-This is a private system - No anonymous login 220 You will be disconnected after 600 minutes of inactivity.
  • Page 187: Example Of Firmware Upload Using Ftp

    Chapter 16 File Manager Figure 117 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen. Table 82 Maintenance > File Manager > Firmware Package LABEL DESCRIPTION Boot This is the version of the boot module that is currently on the NWA/WAC. Module Current This is the firmware version and the date created.
  • Page 188: Shell Script

    Chapter 16 File Manager The FTP server IP address of the NWA/WAC in standalone AP mode is 192.168.1.2, so set your computer to use a static IP address from 192.168.1.3 ~192.168.1.254. Use an FTP client on your computer to connect to the NWA/WAC. For example, in the Windows command prompt, type ftp 192.168.1.2.
  • Page 189 Chapter 16 File Manager Figure 119 Maintenance > File Manager > Shell Script Each field is described in the following table. Table 83 Maintenance > File Manager > Shell Script LABEL DESCRIPTION Rename Use this button to change the label of a shell script file on the NWA/WAC. You cannot rename a shell script to the name of another shell script in the NWA/WAC.
  • Page 190 Chapter 16 File Manager Table 83 Maintenance > File Manager > Shell Script (continued) LABEL DESCRIPTION Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA / WAC Series User’s Guide...
  • Page 191: Diagnostics

    H A P T E R Diagnostics 17.1 Overview Use the diagnostics screen for troubleshooting. 17.1.1 What You Can Do in this Chapter • The Diagnostics screen (Section 17.2 on page 191) generates a file containing the NWA/WAC’s configuration and diagnostic information if you need to provide it to customer support during troubleshooting.
  • Page 192 Chapter 17 Diagnostics The following table describes the labels in this screen. Table 84 Maintenance > Diagnostics LABEL DESCRIPTION Filename This is the name of the most recently created diagnostic file. Last modified This is the date and time that the last diagnostic file was created. The format is yyyy-mm-dd hh:mm:ss.
  • Page 193: Leds

    H A P T E R LEDs 18.1 Overview The LEDs of your NWA/WAC can be controlled such that they stay lit (ON) or OFF after the NWA/WAC is ready. There are two features that control the LEDs of your NWA/WAC - Locator and Suppression. 18.1.1 What You Can Do in this Chapter •...
  • Page 194: Locator Screen

    Chapter 18 LEDs The following table describes fields in the above screen. Table 85 Maintenance > LED > Suppression LABEL DESCRIPTION Suppression On If the Suppression On check box is checked, the LEDs of your NWA/WAC will turn off after it’s ready.
  • Page 195: Antenna Switch

    H A P T E R Antenna Switch 19.1 Overview Use this screen to adjust coverage depending on the orientation of the antenna. 19.1.1 What You Need To Know Positioning the antennas properly increases the range and coverage area of a wireless LAN. On the NWA/WAC that comes with internal antennas and also has an antenna switch, you can adjust coverage depending on the orientation of the antenna for the NWA/WAC radios using the web configurator, the command line interface (CLI) or a physical switch.
  • Page 196 Chapter 19 Antenna Switch Figure 124 Maintenance > Antenna > Antenna Switch Select the Enable Software Control option to use the Web configurator to adjust coverage depending on each radio’s antenna orientation for better coverage. Select Wall if you mount the NWA/WAC to a wall.
  • Page 197: Reboot

    H A P T E R Reboot 20.1 Overview Use this screen to restart the device. 20.1.1 What You Need To Know If you applied changes in the Web configurator, these were saved automatically and do not change when you reboot. If you made changes in the CLI, however, you have to use the write command to save the configuration before you reboot.
  • Page 198: Shutdown

    H A P T E R Shutdown 21.1 Overview Use this screen to shut down the device. Always use Maintenance > Shutdown > Shutdown or the shutdown command before you turn off the NWA/WAC or remove the power. Not doing so can cause the firmware to become corrupt. 21.1.1 What You Need To Know Shutdown writes all cached data to the local storage and stops the system processes.
  • Page 199: Troubleshooting

    H A P T E R Troubleshooting 22.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LED • NWA/WAC Access and Login •...
  • Page 200: Nwa/Wac Access And Login

    Chapter 22 Troubleshooting Disconnect and re-connect the power adaptor or PoE power injector to the NWA/WAC. If the problem continues, contact the vendor. 22.3 NWA/WAC Access and Login I forgot the IP address for the NWA/WAC. The default IP address (in standalone AP mode) is 192.168.1.2. If you changed the IP address and have forgotten it, you have to reset the device to its factory defaults.
  • Page 201: Internet Access

    Chapter 22 Troubleshooting • Try to access the NWA/WAC using another service, such as Telnet. If you can access the NWA/WAC, check the remote management settings to find out why the NWA/WAC does not respond to HTTP. • If your computer is connected wirelessly, use a computer that is connected to a LAN/ETHERNET port. I forgot the password.
  • Page 202: Wireless Connections

    Chapter 22 Troubleshooting If you are trying to access the Internet wirelessly, make sure the wireless settings on the wireless client are the same as the settings on the NWA/WAC. Disconnect all the cables from your device, and follow the directions in the Quick Start Guide again. If the problem continues, contact your ISP.
  • Page 203 Chapter 22 Troubleshooting Make sure the radio or at least one of the NWA/WAC’s radios is operating in AP mode. Make sure the wireless adapter (installed on your computer) is working properly. Make sure the wireless adapter (installed on your computer) is IEEE 802.11 compatible and supports the same wireless standard as the NWA/WAC’s active radio.
  • Page 204 Chapter 22 Troubleshooting • Binary PKCS#12: This is a format for transferring public key and private key certificates.The private key in a PKCS #12 file is within a password-encrypted envelope. The file’s password is not connected to your certificate’s public or private passwords. Exporting a PKCS #12 file creates this and you must provide it to decrypt the contents when you import the file into the NWA/WAC.
  • Page 205 Chapter 22 Troubleshooting In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicator associated with any APs assigned to the load balancing task. • Check to be sure that the AP profile which contains the load balancing settings is correctly assigned to the APs in question.
  • Page 206 Chapter 22 Troubleshooting • Detach the WAC6500 series indoor AP from the mounting bracket. How do I remove the WAC6103D-I indoor AP from its mounting bracket? • Find the down arrow close to the Ethernet ports, then use a thin flat tool (for example, a flat screw driver) to lift up a clip beneath 5GHz LED.
  • Page 207: Resetting The Nwa/Wac

    Chapter 22 Troubleshooting • Turn the WAC6103D-I indoor AP counter-clockwise to detach it from the mounting bracket. 22.6 Resetting the NWA/WAC If you cannot access the NWA/WAC by any method, try restarting it by turning the power off and then on again.
  • Page 208: Getting More Troubleshooting Help

    Chapter 22 Troubleshooting Press the RESET button and hold it until the Power LED begins to blink. (This usually takes about ten seconds.) Release the RESET button, and wait for the NWA/WAC to restart. You should be able to access the NWA/WAC using the default settings. 22.7 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more troubleshooting suggestions.
  • Page 209: Appendix A Importing Certificates

    P P E N D I X Importing Certificates This appendix shows you how to import public key certificates into your web browser. Public key certificates are used by web browsers to ensure that a secure web site is legitimate. When a certificate authority such as VeriSign, Comodo, or Network Solutions, to name a few, receives a certificate request from a website operator, they confirm that the web domain and contact information in the request match those on public record with a domain name registrar.
  • Page 210 Appendix A Importing Certificates If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Continue to this website (not recommended). In the Address Bar, click Certificate Error > View certificates. NWA / WAC Series User’s Guide...
  • Page 211 Appendix A Importing Certificates In the Certificate dialog box, click Install Certificate. In the Certificate Import Wizard, click Next. NWA / WAC Series User’s Guide...
  • Page 212 Appendix A Importing Certificates If you want Internet Explorer to Automatically select certificate store based on the type of certificate, click Next again and then go to step 9. Otherwise, select Place all certificates in the following store and then click Browse. In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK.
  • Page 213 Appendix A Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. 10 If you are presented with another Security Warning, click Yes. 11 Finally, click OK when presented with the successful certificate installation message. NWA / WAC Series User’s Guide...
  • Page 214 Appendix A Importing Certificates 12 The next time you start Internet Explorer and go to a Zyxel Web Configurator page, a sealed padlock icon appears in the address bar. Click it to view the page’s Website Identification information. Installing a Stand-Alone Certificate File in Internet Explorer Rather than browsing to a Zyxel Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you.
  • Page 215 Appendix A Importing Certificates Removing a Certificate in Internet Explorer This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP. Open Internet Explorer and click Tools > Internet Options. In the Internet Options dialog box, click Content > Certificates. NWA / WAC Series User’s Guide...
  • Page 216 Appendix A Importing Certificates In the Certificates dialog box, click the Trusted Root Certificates Authorities tab, select the certificate that you want to delete, and then click Remove. In the Certificates confirmation, click Yes. In the Root Certificate Store dialog box, click Yes. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
  • Page 217 Appendix A Importing Certificates Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however, the screens can also apply to Firefox 2 on all platforms. If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.
  • Page 218 Appendix A Importing Certificates Installing a Stand-Alone Certificate File in Firefox Rather than browsing to a Zyxel Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Firefox and click Tools >...
  • Page 219 Appendix A Importing Certificates In the Certificate Manager dialog box, click Web Sites > Import. Use the Select File dialog box to locate the certificate and then click Open. The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the web page’s security information.
  • Page 220 Appendix A Importing Certificates Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA / WAC Series User’s Guide...
  • Page 221 Appendix A Importing Certificates In the Certificate Manager dialog box, select the Web Sites tab, select the certificate that you want to remove, and then click Delete. In the Delete Web Site Certificates dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
  • Page 222: Appendix B Ipv6

    P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
  • Page 223 Appendix B IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
  • Page 224 Appendix B IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
  • Page 225 Appendix B IPv6 Each DHCP client and server has a unique DHCP Unique IDentifier (DUID), which is used for identification when they are exchanging DHCPv6 messages. The DUID is generated from the MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device.
  • Page 226 Appendix B IPv6 ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6.
  • Page 227 Appendix B IPv6 MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive multicast packets and the IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join.
  • Page 228 Appendix B IPv6 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client.
  • Page 229 Appendix B IPv6 Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. Click Close to exit the Local Area Connection Status screen. Select Start >...
  • Page 230: Appendix C Customer Support

    • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • http://www.zyxel.cn India • Zyxel Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
  • Page 231 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • Zyxel Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • Zyxel Deutschland GmbH • http://www.zyxel.de Belarus • Zyxel BY • http://www.zyxel.by...
  • Page 232 Appendix C Customer Support Belgium • Zyxel Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • http://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • http://www.zyxel.cz Denmark • Zyxel Communications A/S • http://www.zyxel.dk Estonia • Zyxel Estonia • http://www.zyxel.com/ee/et/ Finland •...
  • Page 233 • Zyxel Communications Poland • http://www.zyxel.pl Romania • Zyxel Romania • http://www.zyxel.com/ro/ro Russia • Zyxel Russia • http://www.zyxel.ru Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • Zyxel Communications ES Ltd • http://www.zyxel.es Sweden • Zyxel Communications • http://www.zyxel.se Switzerland •...
  • Page 234 Appendix C Customer Support • http://www.zyxel.ch/ Turkey • Zyxel Turkey A.S. • http://www.zyxel.com.tr • Zyxel Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com Latin America Argentina • Zyxel Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • Zyxel Communications Brasil Ltda.
  • Page 235 Appendix C Customer Support North America • Zyxel Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NWA / WAC Series User’s Guide...
  • Page 236 The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
  • Page 237 (2) this device must accept any interference, including interference that may cause undesired operation of the device. • This radio transmitter (2468C-NWA5123AC (NWA5123-AC), 2468C-NWA5123ACHD (NWA5123-AC HD), 2468C-WAC6502DE (WAC6502D-S, WAC6502D-E), 2468C-WAC6503DS (WAC6503D-S), 2468C-WAC6552DS (WAC6552D-S), 2468C-WAC6553DE (WAC6553D-E), 2468C- WAC6303DS (WAC6303D-S), 2468C-WAC6103DI (WAC6103D-I), 2468C-WAC5302DS (WAC5302D-S)) has been approved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated.
  • Page 238 • Le présent émetteur radio (2468C-NWA5123AC (NWA5123-AC), 2468C-NWA5123ACHD (NWA5123-AC HD), 2468C-WAC6502DE (WAC6502D- S, WAC6502D-E), 2468C-WAC6503DS (WAC6503D-S), 2468C-WAC6552DS (WAC6552D-S), 2468C-WAC6553DE (WAC6553D-E), 2468C- WAC6303DS (WAC6303D-S), 2468C-WAC6103DI (WAC6103D-I), 2468C-WAC5302DS (WAC5302D-S)) de modèle s'il fait partie du matériel de catégorieI) a été...
  • Page 239 U.FL 3.07 (2400-2483.5 MHz) PIFA U.FL 4.06 (5150-5250 MHz) 3.91 (5725-5850 MHz) PIFA U.FL 3.99 (5150-5250 MHz) 3.79 (5725-5850 MHz) NWA5123-AC HD PIFA I-PEX 3 (2400-2483.5 MHz) PIFA I-PEX 3 (2400-2483.5 MHz) Monopole I-PEX 4 (5150-5250 MHz) 4 (5725-5850 MHz)
  • Page 240 Cet équipement est conforme aux limites d’exposition aux rayonnements IC établies pour un environnement non contrôlé.Cet équipement doit être installé et utilisé avec un minimum de 22 cm (NWA5123-AC HD) de distance entre la source de rayonnement et votre corps.
  • Page 241 • The band 5,150 MHz to 5,350 MHz is 192.31 mW, • The band 5,470 MHz to 5,725 MHz is 391.74 mW. NWA5123-AC HD • This equipment should be installed and operated with a minimum distance of 20 cm between the radio equipment and your body.
  • Page 242 Appendix D Legal Information Eesti keel Käesolevaga kinnitab Zyxel seadme seadmed vastavust direktiivi 2014/53/EU põhinõuetele ja nimetatud direktiivist (Estonian) tulenevatele teistele asjakohastele sätetele. Ελληνικά ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ Zyxel ∆ΗΛΩΝΕΙ ΟΤΙ εξοπλισμός ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩ∆ΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ (Greek) ∆ΙΑΤΑΞΕΙΣ...
  • Page 243 RF exposure requirement. External antenna Use only the antennas which have been approved by Zyxel Communications Corporation. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of FCC/IC limit and is prohibited.
  • Page 244 Appendix D Legal Information Safety Warnings • Do not use this product near water, for example, in a wet basement or near a swimming pool. • Do not expose your device to dampness, dust or corrosive liquids. • Do not store things on the device. •...
  • Page 245 Appendix D Legal Information NWA / WAC Series User’s Guide...
  • Page 246 Appendix D Legal Information About the Symbols Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents.
  • Page 247 Index Index Bluetooth Smart Symbols boot module access and certificates access privileges CA (Certificate Authority), see certificates access users CAPWAP see also users 69, 71 CEF (Common Event Format) admin users 172, 177 multiple logins Certificate Authority (CA) see also users see certificates alerts Certificate Management Protocol (CMP)
  • Page 248 Index channel DHCP and domain name 20, 34 button diagnostics messages disclaimer popup window domain name Reference Guide DTLS cold start dual radios commands dual-radio application sent by Web Configurator dynamic channel selection Common Event Format (CEF) 172, 177 comparison table 13, 14 configuration information...
  • Page 249 Index HTTP key pairs over SSL, see HTTPS redirect to HTTPS vs HTTPS HTTPS and certificates lastgood.conf 182, 184 authenticating clients layer-2 isolation avoiding warning messages example example vs HTTP with Internet Explorer LED suppression with Netscape Navigator LEDs HyperText Transfer Protocol over Secure Socket Layer, Blinking 21, 23, 25 see HTTPS...
  • Page 250 Index standalone mode management mode managing the device radio good habits reboot 27, 197 using FTP. See FTP. vs reset MBSSID Reference Guide, CLI memory usage 49, 52 registration message bar product messages remote management FTP, see FTP warning Telnet WWW, see WWW mode reports...
  • Page 251 Index how applied supported browsers managing syslog 172, 177 syntax syslog servers, see also logs uploading system log, see logs shutdown 27, 198 system name 49, 144 vs reset system uptime Simple Certificate Enrollment Protocol (SCEP) system-default.conf Simple Network Management Protocol, see SNMP SNMP 163, 164 agents...
  • Page 252 Index default lease time SSID 98, 100 default reauthentication time wireless repeater 98, 100 lease time wireless security 16, 202 limited-admin (type) wireless station lockout Wizard Setup reauthentication time WLAN interface types of WPA2 user (type) user names and certificates see also HTTP, HTTPS Vantage Report (VRPT) 172, 177...

Table of Contents