ZyXEL Communications WBE Series User Manual

ZyXEL Communications WBE Series User Manual

802.11 a/b/g/n/ac/ax/be access point
Table of Contents

Advertisement

Quick Links

User's Guide
NWA/WAC/WAX/WBE Series
802.11 a/b/g/n/ac/ax/be Access Point
Default Login Details
Management IP
Address
User Name
Password
Copyright © 2024 Zyxel and/or its affiliates. All rights reserved.
http://DHCP-assigned IP
OR
http://192.168.1.2
admin
1234
Version 6.70-7.00 Edition 1, 7/2024

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the WBE Series and is the answer not in the manual?

Questions and answers

Summary of Contents for ZyXEL Communications WBE Series

  • Page 1 User’s Guide NWA/WAC/WAX/WBE Series 802.11 a/b/g/n/ac/ax/be Access Point Default Login Details Version 6.70-7.00 Edition 1, 7/2024 Management IP http://DHCP-assigned IP Address http://192.168.1.2 User Name admin Password 1234 Copyright © 2024 Zyxel and/or its affiliates. All rights reserved.
  • Page 2: Read Carefully Before Use

    NXC as an AP Controller (AC) for the Zyxel Device. This is used when the Zyxel Device is set to be managed by a Zyxel AC. • More Information Go to support.zyxel.com to find other information on the Zyxel Device NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 3: Warnings And Notes

    Icons Used in Figures Figures in this guide may use the following generic icons. The Zyxel Device icon is not an exact representation of your device. Zyxel Device Router Switch Internet Server Desktop Laptop IP Phone Printer Smart TV. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 4: Table Of Contents

    Diagnostics ............................266 LEDs ..............................268 Antenna Switch ..........................271 Reboot ..............................273 Local Configuration in Cloud Mode ....................275 Cloud Mode ............................276 Network ............................... 279 Maintenance ............................282 Appendices and Troubleshooting ....................289 Troubleshooting ..........................290 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 5: Table Of Contents

    3.2 Zyxel Device Models With Single LEDs ..................41 3.3 Zyxel Device LED ..........................41 3.4 Ports ..............................46 3.4.1 Ways to Reset a Zyxel Device without a Reset Button ............49 Chapter 4 Web Configurator..........................51 4.1 Overview ............................51 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 6 8.2.3 Set Up a WiFi Network in Root AP/Repeater Mode ............80 8.2.4 Set Up General and Guest WiFi Networks on Both Radios ..........81 8.3 Limit Network Bandwidth for Each WiFi Client ................86 8.4 Network Security ..........................87 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 7 10.1.2 What You Can Do in this Chapter ................... 122 10.2 IP Setting ............................123 10.3 VLAN ............................124 10.4 Storm Control ..........................129 10.5 AC (AP Controller) Discovery ....................130 10.6 NCC Discovery ..........................131 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 8 14.2.1 Add/Edit Radio Profile ...................... 165 14.3 SSID ............................... 172 14.3.1 SSID List ..........................172 14.3.2 Add/Edit SSID Profile ......................174 14.4 Security List ..........................176 14.4.1 Add/Edit Security Profile ....................177 14.4.2 Creating a Security Profile ....................193 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 9 17.5 WWW Overview .......................... 223 17.5.1 Service Access Limitations ....................223 17.5.2 System Timeout ........................223 17.5.3 HTTPS ........................... 223 17.5.4 Configuring WWW Service Control ................. 224 17.5.5 HTTPS Example ........................226 17.6 SSH ..............................231 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 10 19.4 Shell Script ............................ 264 Chapter 20 Diagnostics ............................266 20.1 Overview ............................. 266 20.1.1 What You Can Do in this Chapter ................... 266 20.2 Diagnostics ..........................266 20.3 Remote Capture ........................267 Chapter 21 LEDs ..............................268 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 11 Chapter 26 Maintenance............................282 26.1 Overview ............................. 282 26.1.1 What You Can Do in this Chapter ................... 282 26.2 Shell Script ............................ 282 26.3 Diagnostics ..........................285 26.4 Remote Capture ........................285 26.5 View Log ............................286 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 12 27.6 Resetting the Zyxel Device ......................300 27.7 Getting More Troubleshooting Help ..................300 Appendix A Importing a Certificate ..................... 301 Appendix B IPv6..........................314 Appendix C Customer Support ..................... 322 Appendix D Legal Information ...................... 327 Index ..............................339 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 13: Introduction

    Section on page 17 for more information on root and repeater APs and how to set them up. The screens you see in the Web Configurator may be different depending on the Zyxel Device model you are using. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 14: Zyxel Device Product Feature Comparison

    Internal Antennas Antenna Switch Smart Antenna Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial Reset Button LED Locator LED Suppression AC (AP Controller) Discovery NebulaFlex PRO NCC Discovery 802.11r Fast Roaming Support 802.11k/v Assisted Roaming Proxy ARP NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 15 IEEE 802.3af IEEE 802.3af IEEE 802.3af IEEE 802.3at IEEE 802.3at IEEE 802.3at Power Detection External Antennas Internal Antennas Antenna Switch Yes (per AP) Yes (per AP) Smart Antenna Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 16 Personal & Enterprise Enterprise Enterprise Number of SSID Profiles Number of WiFi Radios Security Profile Radius Settings Security Profile Enterprise Authentication Settings Rogue AP Detection WDS (Wireless Distribution System) - Root AP & Repeater Modes Wireless Bridge NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 17 2.4G: 20/40 MHz 5G: 20/40/80 MHz 5G: 20/40/80/160 MHz Available Security Modes None /Enhanced-open None /Enhanced-open / / WEP / WPA2-MIX / WEP / WPA2-MIX / WPA3 WPA3 - Personal & - Personal & Enterprise Enterprise NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 18 802.11r Fast Roaming Support 802.11k/v Assisted Roaming Proxy ARP Bluetooth Low Energy (BLE) Load Balancing Ethernet Storm Control Wireless Remote Capture SNMP Grounding Power Jack Maximum number of log 512 event logs messages Latest Firmware Version 7.00 7.00 Supported NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 19 Smart Antenna Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial Reset Button LED Locator LED Suppression AC (AP Controller) Discovery NebulaFlex PRO NCC Discovery 802.11r Fast Roaming Support 802.11k/v Assisted Roaming Proxy ARP Bluetooth Low Energy (BLE) NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 20 WDS (Wireless Distribution System) - Root AP & Repeater Modes Wireless Bridge Tunnel Forwarding Mode Layer-2 Isolation Supported PoE Standards IEEE 802.3at IEEE 802.3at IEEE 802.3bt IEEE 802.3af IEEE 802.3af IEEE 802.3at Power Detection External Antennas Internal Antennas NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 21: Zyxel Device Roles

    If a client (D) tries to set up his own AP (R) with weak security settings, the network becomes exposed to threats. The RF monitor (M) scans the area to detect all APs, which can help the network administrator discover these rogue APs and remove them. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 22: Wireless Distribution System (Wds)

    Internet access and has wireless repeaters (X and Z) connected to it to expand the WiFi network’s range. Clients (A and B) can access the wired network through the wireless repeaters (X and Z) and/or root AP. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 23 (X) to expand the network. Clients (A and B) are connected to the wireless repeater through the switch/ gateway/router (G). They can access the network with the extended wired network the wireless bridge (wireless repeater) provides. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 24: Access Point (Ap)

    In Root AP mode, you can have multiple SSIDs active for regular WiFi connections and one SSID (WDS SSID) for the connection with a repeater. WiFi clients can use either SSID to associate with the Zyxel NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 25 134 Section 15.2 on page 200 for more details. For NCC managed devices, you only need to enable AP Smart Mesh to automatically create WiFi links between APs. See the NCC User’s Guide for more details. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 26: Radio Frequency (Rf) Monitor

    Guest_SSID is the WiFi network for guest users. In this example, the guest user is forbidden access to the wired Local Area Network (LAN) behind the AP and can access only the Internet. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 27: Dual-Radio/Triple-Radio And Bandflex

    You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz or 6 GHz band for time sensitive traffic like high-definition video, music, and gaming. Section 1.2 on page 14 for the supported number of radios, frequency bands, and see if your Zyxel Device supports BandFlex. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 28 Chapter 1 Introduction Figure 7 Dual-Radio Application Figure 8 Triple-Radio Application NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 29: Ap Management

    When working in standalone mode, the Zyxel Device is configured mainly with its built-in Web Configurator. You can only connect to and set up one Zyxel Device at a time in this mode. Chapter 5 on page 63 for detailed information about the standalone Web Configurator screens. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 30: Nebula Control Center

    It graphically presents your device/network statistics and shows an overview of your network topology, as shown in the following figure. It also sends reports, alerts, and notifications for events, such as when a site goes offline. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 31 Zyxel Device’s VLAN setting or manually set its IP address. Note: Make sure your network firewall allows TCP ports 443, 4335, and 6667 as well as UDP port 123 so the device can connect to and sync with the NCC. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 32: Ap Controller (Ac)

    Make sure AC Discovery is enabled (see Section 10.5 on page 130). The AC manages the Zyxel Device automatically when it is discovered. NCC-to-Standalone Back up your configurations first, then unregister the Zyxel Device from the NCC organization/site. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 33: Zyxel One Network (Zon) Utility

    Note: It is suggested that you install Npcap, the packet capture library for Windows operating systems, and remove WinPcap or any other installed packet capture tools before you install the ZON utility. Hardware Here are the minimum hardware requirements to use the ZON Utility on your computer. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 34: Run The Zon Utility

    ZON icon in the upper right hand corner of the screen. Then select the Supported model and firmware version link. If your device is not listed here, see the device release notes for ZON Utility support. The release notes are in the firmware zip file on the Zyxel web site. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 35 Select a network adapter to which your supported devices are connected. Figure 12 Network Adapter Click the Go button for the ZON Utility to discover all supported devices in your network. Figure 13 Discovery The ZON Utility screen shows the devices discovered. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 36 Use this icon to locate the selected device by causing its Locator LED to blink. 6 Web GUI Use this to access the selected device Web Configurator from your browser. You will need a username and password to log in. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 37 AP controller managed mode. If the selected device has successfully connected to the NCC and is registered on the NCC, it will change to the Nebula cloud mode. Serial Number Enter the admin password of the discovered device to display its serial number. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 38: Ways To Access The Zyxel Device

    This protocol can be used for firmware upgrades and configuration backup and restore. Simple Network Management Protocol (SNMP) The Zyxel Device can be monitored by an SNMP manager. See the SNMP chapter in this User’s Guide. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 39: Good Habits For Managing The Zyxel Device

    Zyxel Device to its factory default settings. If you backed up an earlier configuration file, you will not have to totally re-configure the Zyxel Device; you can simply restore your last configuration. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 40: Hardware

    Warning! Connect the ground cable before you connect any other cables or wiring. The figure below illustrates how the ground cable (A) is attached to the Zyxel Device and goes to the earth ground (B). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 41: Zyxel Device Models With Single Leds

    The LED of the Zyxel Device can be controlled by using the suppression feature such that the LED stays lit (ON) or OFF after the Zyxel Device is ready. Refer to Section 21.1 on page 268 for the LED Suppression and Locator menus in standalone mode. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 42 Chapter 3 Hardware Figure 17 WAC500, NWA1123Acv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S LED NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 43 Chapter 3 Hardware Figure 18 WAC500H, WAX300H LED Figure 19 NWA220AX-6E, WAX620D-6E LED NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 44 DESCRIPTION Amber Blinks between amber The Zyxel Device is booting up. and green alternately (300 milliseconds interval). Green Amber Blinks between amber The Zyxel Device is discovering the NCC. and green alternately (1 second interval). Green NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 45 Fast Blinking (On for 50 The Zyxel Device is undergoing firmware upgrade. milliseconds, Off for 50 milliseconds) Slow Blinking (Blink for 3 The uplink of the Zyxel Device is disconnected. times, Off for 3 seconds) NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 46: Ports

    Chapter 3 Hardware 3.4 Ports The following shows the Zyxel Device panels with connection ports. Figure 22 NWA1123Acv3, WAC500 Ports Figure 23 NWA210AX, NWA220AX-6E, WAX610D, WAX620D-6E, WAX630S, WAX650S Ports NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 47 Chapter 3 Hardware Figure 24 NWA110AX, WAX510D Ports Figure 25 WAX640S-6E Ports Figure 26 WBE660S Ports NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 48 • Flow Control Off RESET Press the button for more than 5 seconds to return the Zyxel Device to the factory defaults. POWER Connect the power adapter and press the ON/OFF button to start the device NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 49: Ways To Reset A Zyxel Device Without A Reset Button

    Zyxel Device to its factory default settings. A pop-up window asks you to confirm that you want to reset the Zyxel Device to factory default. Click OK to proceed with reset. A count down starts. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 50 If your Zyxel Device is registered with NCC, you can unregister it to reset it to its factory default settings. Go to Organization-wide > License & inventory > Devices tab in the NCC portal. Select the Zyxel Device you want to remove, then click Actions > Remove from organization. Click the Yes button to confirm. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 51: Web Configurator

    Browse to the Zyxel Device’s DHCP-assigned IP address or http://192.168.1.2. The Login screen appears. If you are in cloud mode, check the NCC’s Site-wide > Devices > Access points screen for the Zyxel Device’s LAN IP address. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 52 Zyxel Device (see Section 2.1.2 on page Figure 30 Nebula Intro Page To go to the login page, click Standalone Mode. Login page displays as shown in the following figure. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 53 Figure 32 Update Admin Info Screen The Update Admin Info screen appears every time you log in using the default user name and default password. If you change the password for the default user account, this screen does not appear anymore. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 54: Navigating The Web Configurator

    Figure 33 The Web Configurator’s Main Screen for Standalone Mode Figure 34 The Web Configurator’s Main Screen for Cloud Mode The Web Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation Panel • C - Main Window NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 55: Title Bar

    Click this to open the NCC web site login page in a new tab or window. Site Map Click Site MAP to see an overview of links to the Web Configurator screens. Click a screen’s link to go to that screen. Figure 36 Site Map NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 56: Cli Messages

    The following are the screens available in standalone mode. Note that some screens may not be available for your Zyxel Device model. See Section 1.2 on page 14 to see which features your Zyxel Device model supports. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 57 Configure the beacon ID(s) to be included in the Bluetooth advertising packet. Object User User Create and manage users. Setting Manage default settings for all users, general settings for user sessions, and rules to force user authentication. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 58: Maintenance Menu

    Restart the Zyxel Device. 4.3.4 Cloud Mode Navigation Panel Menus If your Zyxel Device is in cloud (NCC) mode, you only need to use the Web Configurator for troubleshooting if your Zyxel Device cannot connect to the Internet. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 59: Tables And Lists

    The Web Configurator tables and lists are quite flexible and provide several options for how to display their entries. 4.3.5.1 Manipulating Table Display Here are some of the ways you can manipulate the Web Configurator tables. Click a column heading to sort the table’s entries according to that column’s criteria. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 60 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 61 To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate. Object Reference Select an entry and click Object Reference to open a screen that shows which settings use the entry. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 62: Standalone Configuration

    Standalone Configuration...
  • Page 63: Standalone Configuration

    A warm start (without powering down and powering up again) occurs when you use the Device Reboot button in the Reboot screen or when you use the reboot command. The Zyxel Device writes all cached data to the local storage, stops the system processes, and then does a warm start. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 64 It does not stop the system processes or write cached data to local storage. The Zyxel Device does not stop or start the system processes when you apply configuration files or run shell scripts although you may temporarily lose access to network resources. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 65: Dashboard

    Click this to close the widget. Use Widget Settings to re-open it. Device Information System Name This field displays the name used to identify the Zyxel Device on any network. Click the icon to open the screen where you can change it. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 66 This field displays the RSSI (Received Signal Strength Indicator) and transmission/reception rate of the wireless connection in WDS. System Status System Uptime This field displays how long the Zyxel Device has been running since it last restarted or was turned on. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 67 Advertising displays if the Zyxel Device supports Bluetooth, detects a BLE device, and advertising is activated, which means the Zyxel Device can broadcast packets to every BLE device around it. Not all models support BLE, see Section 1.2 on page 14 for the supported model list. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 68 If the interface has a static IP address, this shows n/a. If the interface has a dynamic IP address, use this field to get or to update the IP address for the interface. Click Renew to send a new DHCP request to a DHCP server. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 69: Cpu Usage

    This displays the number of detected friendly APs. 6.1.1 CPU Usage Use this screen to look at a chart of the Zyxel Device’s recent CPU usage. To access this screen, click CPU Usage in the dashboard. Figure 41 Dashboard > CPU Usage NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 70: Memory Usage

    The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 71: Setup Wizard

    • Offset allows you to specify how much the clock changes when daylight saving begins and ends. Enter a number from 1 to 5.5 (by 0.5 increments). Click Next to proceed. Click Cancel to close the wizard without saving. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 72: Step 2 Password And Uplink Connection

    • a DNS server's IP address. The Domain Name System (DNS) maps a domain name to an IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 73: Step 3 Ssid

    SSID (WiFi network name) and WiFi password, double-click the SSID profile entry from the list. Section 7.2.3.1 on page 74 for more information. Note: You must configure an SSID to continue. Note: You cannot add or remove an SSID profile after running the setup wizard. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 74 RADIUS server to be used for authentication. Note: See Section 1.2 on page 14 for models that support the 6 GHz band. Click OK to proceed. Click Cancel to close the screen without saving. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 75: Step 4 Radio

    • Maximum Output Power: Enter the maximum output power of the Zyxel Device. If there is a high density of APs in an area, decrease the output power of the Zyxel Device to reduce interference with other APs. Note: Reducing the output power also reduces the Zyxel Device’s effective broadcast radius. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 76: Step 5 Summary

    Use this screen to check whether what you have configured is correct. Click Save to apply your settings and complete the wizard setup. Otherwise, click Prev to return to the previous screen or click Cancel to close the wizard without saving. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 77 Chapter 7 Setup Wizard Figure 51 Wizard: Summary NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 78: Getting Started

    OP mode, go to Configuration > Wireless > AP Management. Figure 52 OP Modes The Zyxel Device supports the following OP modes: • Choose AP Mode if you want WiFi clients to connect to the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 79: Set Up A Wifi Network In Ap Mode

    (36 in this example) that is not used by another AP. Click OK. Go to Configuration > Object > AP Profile > SSID > SSID List, select the default SSID profile and click Edit to configure the SSID settings. Click OK. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 80: Set Up A Wifi Network In Root Ap/Repeater Mode

    Enter a profile name, a WDS SSID, and a pre-shared key. Go to Configuration > Wireless > AP Management, select the Radio WDS Profile of the radio on which you are setting the WDS connection to use the WDS profile you set, and click Apply. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 81: Set Up General And Guest Wifi Networks On Both Radios

    VLAN 10, where your internal network is. Set the Guest WiFi network to be in VLAN 20. This way, Guest WiFi clients will not be able to access the wired LAN network of the firewall (F) in VLAN 10 while still able to access the Internet. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 82 Monday-Friday: 09:00-17:00 Go to Configuration > Object > AP Profile > SSID > SSID List, click Add to create an SSID profile. Configure the first SSID – Zyxel_General using the parameters given above, and then click OK. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 83 Chapter 8 Getting Started Configure the second SSID – Zyxel_Guest using the parameters given above, and then click OK. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 84 Chapter 8 Getting Started Go to Configuration > Wireless > AP Management. Click the first SSID Profile of Radio 1 (2.4 GHz). A drop- down list appears. Select the General SSID profile you just configured. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 85 1 and Radio 2. You should now be able to see the Zyxel_General and Zyxel_Guest SSIDs on your WiFi devices for both 2.4 GHz and 5 GHz radio bands. General WiFi users can access the Internet and your local network. Guest users can only access the Internet. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 86: Limit Network Bandwidth For Each Wifi Client

    Go to Configuration > Object > AP Profile > SSID > SSID List, select a profile and click Edit. Enter the maximum transmission data rate (either in Mbps or Kbps) for each WiFi client in the Downlink field. Click OK to save your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 87: Network Security

    Go to the Configuration > Wireless > AP Management > WLAN Setting screen. Click Edit under the SSID profile to change the WiFi security. The following screen appears, click the Edit icon next to Security Profile. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 88: Radius Server Setup

    This option is ideal for enterprise users who need to manage many WiFi clients. Go to the Configuration > Object > AP Profile > SSID > Security List screen. Select a profile you want to configure for the RADIUS server and click Edit. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 89: Set Up Rogue Ap Detection

    AP is a WiFi access point operating in a network’s coverage area that is not a sanctioned part of that network. See Section 11.3 on page 140 for background information on the rogue AP function and security considerations. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 90 Table 26 Rogue AP Example Information DEVICE IP ADDRESS MAC ADDRESS Access Point A 192.168.1.1 00:AA:00:AA:00:AA Access Point B 192.168.1.2 AA:00:AA:00:AA:00 Access Point C 192.168.1.3 A0:0A:A0:0A:A0:0A Access Point D 192.168.1.4 0A:A0:0A:A0:0A:A0 Access Point 1 Unknown AF:AF:AF:FA:FA:FA NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 91: Set Up A Friendly Ap List

    AP to include it in the list. MAC ADDRESS DESCRIPTION 00:AA:00:AA:00:AA My Access Point _A_ AA:00:AA:00:AA:00 My Access Point _B_ A0:0A:A0:0A:A0:0A My Access Point _C_ 0A:A0:0A:A0:0A:A0 My Access Point _D_ AF:AF:AF:FA:FA:FA Coffee Shop Access Point _1_ NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 92 Access point A is now configured to do the following. • Scan for access points in its coverage area • Recognize friendly access points from a list Now you need to configure the other WiFi access points in your network to do the same things. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 93: Set Up A Mac Filter List

    Fill in the Profile Name and select deny for Filter Action. Click Add to add a new MAC address to block. Enter the MAC addresses of the clients you want to block under the MAC field and then click OK. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 94: Restrict Users' Access To Specific Parts Of Your Network

    SSID profiles simultaneously. You have configured each SSID profile as shown in the following table. Table 27 SSID Profile Security Settings SSID Profile Name SERVER_1 SERVER_2 SSID SSID_S1 SSID_S2 Security Security Profile security03: Security Profile security04: WPA2-PSK WPA2-PSK Hide SSID Hide SSID Intra-BSS traffic blocking Enabled Enabled NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 95 Take the following steps to configure the SERVER_1 network. Go to Configuration > Object > AP Profile > SSID > SSID List. The following screen displays, showing the SSID profiles you already configured. Select SERVER_1’s entry and click Edit. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 96 Change the Profile Name to “L2-ISO_SERVER_1” and click OK. You have restricted users on the SERVER_1 network to access only the devices with the MAC addresses you entered. Go to the MAC Filter List tab. Then, select macfilter03’s entry and click Edit. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 97: Test Your Wifi Access Restrictions

    Description: GATEWAY MAC Filter (macfilter04) Edit Screen Profile Name MacFilter_SERVER_2 Set 1 MAC Address: 22:33:44:55:66:77 Description: Bob 8.4.7 Test Your WiFi Access Restrictions Use the following sections to ensure that your WiFi networks are set up correctly. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 98: Check Settings

    SERVER_1 network. You should be unable to do so. If you can do so, MAC filtering is misconfigured. Test the SERVER_2 network. • Using Bob’s computer and WiFi client, and the correct security settings, do the following. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 99: Device Settings

    Set the computer’s IP address to be in the same subnet as the Zyxel Device. For example, the default static management IP address of the Zyxel Device is 192.168.1.2. Make sure your computer’s IP address is from 192.168.1.3~192.168.1.254. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 100: Change The System Name

    Go to the Configuration > System > Host Name screen and enter a new name with 1 to 64 alphanumeric characters in the System Name field. Spaces are not allowed. Click Apply to save your changes. See the System Name field in the Dashboard screen to check if the new system name has been applied. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 101: Change The Login Password

    The Edit User admin screen appears. Enter the new password with 4 to 63 alphanumeric characters. Retype the new password and click OK. 8.6 Device Maintenance In this section, we show you how to: • Upgrade the Firmware NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 102: Upgrade The Firmware

    Under the Configuration Files, select startup-config.conf and click Download. The current configuration file that the Zyxel Device is using is saved to your computer. You can rename the configuration file to include the date you downloaded it. For example, startup-config.conf_20240716. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 103: Log And Report

    Go to Configuration > Log & Report > Log Setting. Select the item and click Edit.The following screen appears. In this example, your mail server’s IP address is 192.168.1.25. Enter this IP address in the Mail Server field. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 104: Back Up Logs To A Remote Server

    Zyxel Device. The Zyxel Device can keep at most 512 logs. If the logs exceed this number, the oldest logs will be lost. Go to Configuration > Log & Report > Log Setting. Select a remote server to configure, and then click Edit. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 105 • Red X - Do not send the remote server logs for any log category. • Green checkmark - Send the remote server log messages and alerts for all log categories. • Yellow checkmark - Send the remote server log messages, alerts, and debugging information for all log categories. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 106: Access To The Zyxel Device

    Perform the following to find the options to configure remote access to your Zyxel Device. HTTPS / HTTP Go to the Configuration > System > WWW screen. Select whether you want to access the Zyxel Device remotely through HTTPS or HTTP. Click Apply to save your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 107 SSH. Click Apply to save your changes. You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 108: Monitor

    Friendly AP Friendly APs are other wireless access points that are detected in your network, as well as any others that you know are not a threat (those from neighboring networks, for example). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 109: Network Status

    DHCP request to a DHCP server. If the interface cannot use one of these ways to get or to update its IP address, this field displays n/a. Port Statistics Table Poll Interval Enter how often you want this window to be updated automatically, and click Set Interval. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 110: Port Statistics Graph

    9.3.1 Port Statistics Graph Use the port statistics graph to look at a line graph of packet statistics for the Ethernet port. To view, click Monitor > Network Status and then the Switch to Graphic View button. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 111: Radio List

    This field displays the date and time the information in the window was last updated. 9.4 Radio List Use this screen to view statistics for the Zyxel Device’s WiFi radio transmitters. To access this screen, click Monitor > Wireless > AP Information > Radio List. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 112: Ap Mode Radio Information

    This screen allows you to view a selected radio’s SSID details, wireless traffic statistics and station count for the preceding 24 hours. To access this window, select a radio and click the More Information button in the Radio List screen. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 113 This list shows information about all the WiFi clients that have connected to the specified radio over the preceding 24 hours. This is the items sequential number in the list. It has no bearing on the actual data in this list. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 114: Station List

    Band This is the frequency band to which the station is connected. MAC Address This is the station’s MAC address. Radio This is the radio number on the Zyxel Device to which the station is connected. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 115: Wds Link Info

    Use this screen to view the WDS traffic statistics between the Zyxel Device and a root AP or repeaters. Section 1.3 on page 21 to know more about WDS. Click Monitor > Wireless > WDS Link Info to access this screen. Figure 66 Monitor > Wireless > WDS Link Info NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 116: Detected Device

    Click Monitor > Wireless > Detected Device to access this screen. For more information about Rogue APs, see Section 11.3 on page 140. Note: Turn on Enable Rogue AP Detection in the Configuration > Wireless > Rogue AP screen to detect other APs. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 117 This indicates the encryption method (if any) used by the detected device. Description This displays the detected device’s description. For more on managing friendly and rogue APs, see the Configuration > Wireless > Rogue AP screen (Section 11.3 on page 140). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 118: View Log

    The Web Configurator saves the filter settings once you click Search. If you leave the View Log screen and return to it later, the last filter settings would still apply. Figure 68 Monitor > Log > View Log NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 119 This field displays the destination interface of the packet that generated the log message. Interface Protocol This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 120: Network

    Section 1.1 on page 13 for more information. The following figure illustrates a wireless network managed by an AC. You (U) configure the AC (C), which then automatically updates the configurations of the managed APs (M1 ~ M4). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 121: Managed Ap Finds The Controller

    • Get the controller’s IP address from a DHCP server with the controller’s IP address configured as option 138. • Get the controller’s IP address from a DNS server SRV (Service) record. • Broadcasting to discover the controller within the broadcast domain. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 122: What You Can Do In This Chapter

    (Section 10.4 on page 129) turns on or off the traffic storm control feature on the Zyxel Device. • The AC Discovery screen (Section 10.5 on page 130) configures the Zyxel Device’s AP Controller (AC) settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 123: Ip Setting

    Enter the IP address for this interface. Subnet Mask Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers in the network. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 124: Vlan

    This section discusses how to configure the Zyxel Device’s VLAN settings. Note: Mis-configuring the management VLAN settings on your Zyxel Device can make it inaccessible. If this happens, you will have to reset the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 125 VLAN ID does not exist in the main office network. To bridge the branch office network and the main office network, the VLAN IDs you set on the Zyxel Device (X) should be the same as the VLAN IDs you set on the root AP (Y). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 126: Ieee 802.1Q Tag

    The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. Use this screen to configure the VLAN settings for your Zyxel Device. To access this screen, click Configuration > Network > VLAN. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 127 Zyxel Device. LAN Setting Note: The following settings are only available if your Zyxel Device supports wireless bridge and have more than one Ethernet port. See the feature comparison table in Section 1.2 on page Port Setting NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 128 (T). Wireless Bridge Vlan Setting This section appears if your Zyxel Device supports wireless bridge. See the feature comparison table in Zyxel Device Product Feature Comparison. Click this to add an entry in the table. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 129: Storm Control

    Section 1.2 on page Note: The maximum traffic rate can be changed using the CLI (see the CLI Reference Guide). To access this screen, click Configuration > Network > Storm Control. Figure 77 Configuration > Network > Storm Control NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 130: Ac (Ap Controller) Discovery

    Zyxel Device. You can get the configuration file at conf/system-default.conf. You must reboot the Zyxel Device after uploading the configuration file. To access the Controller Discover screen, click Configuration > Network > AC Discovery. Figure 78 Configuration > Network > AC Discovery NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 131: Ncc Discovery

    You can manage the Zyxel Device through the Zyxel Nebula Control Center (NCC). Use this screen to configure the proxy server settings if the Zyxel Device is behind a proxy server. To access this screen, click Configuration > Network > NCC Discovery. Figure 79 Configuration > Network > NCC Discovery NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 132 NCC. User Name Enter your proxy user name. Password Enter your proxy password. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 133: Wireless

    (Section 11.4 on page 144) allows you to configure network traffic load balancing between the APs and the Zyxel Device. • The DCS screen (Section 11.5 on page 146) allows you to configure dynamic radio channel selection. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 134: What You Need To Know

    (AP) or you limit the amount of wireless traffic transmitted and received on it so the AP does not become overloaded. 11.2 AP Management Use this screen to manage the Zyxel Device’s general WiFi settings. Click Configuration > Wireless > AP Management to access this screen. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 135 Chapter 11 Wireless Figure 81 Configuration > Wireless > AP Management NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 136 Chapter 11 Wireless Figure 82 Configuration > Wireless > AP Management (for Zyxel Device with multiple Ethernet ports - in Repeater mode) NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 137 Add to create a new entry after the selected entry. Radio 1 WDS Profile This field is available only when the radio is in Root AP or Repeater mode. Select the WDS profile the radio uses to connect to a root AP or repeater. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 138 SSID profile will not be enabled. You can configure the SSID profile’s applicable frequency bands in the Edit SSID Profile screen (click the Edit button next to the profile). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 139 Click this to show the Wireless Bridge Vlan Setting pop-up window. This link is available only Vlan ID when the radio is in Root AP or Repeater mode. Wireless Bridge Vlan Setting Click this to add an entry in the table. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 140: Rogue Ap

    (X) running readily available encryption-cracking software. In this example, the attacker now has access to the company network, including sensitive data stored on the file server (C). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 141: Rogue Ap Detection

    Detected Device screen will appear in the Wireless > Rogue AP screen. See Section 1.2 on page 14 know which models support Rogue AP Detection. Note: Enabling Rogue AP Detection might affect the performance of WiFi clients associated with the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 142 Click this button to add an AP to the list and assign it either friendly or rogue status. Edit Select an AP in the list to edit and reassign its status. Remove Select an AP in the list to remove. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 143: Add/Edit Rogue/Friendly List

    Enter up to 60 characters for the AP’s description. Spaces and underscores are allowed. Role Select either Rogue AP or Friendly AP for the AP’s role. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to close the window with changes unsaved. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 144: Load Balancing

    Select the threshold traffic level at which the Zyxel Device begins load balancing its connections (Low, Medium, High). The maximum bandwidth allowed for each level is: • Low - 11 Mbps • Medium - 23 Mbps • High - 35 Mbps NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 145: Disassociating And Delaying Connections

    AP with bandwidth to spare. Figure 88 Delaying a Connection The second response your AP can take is to disassociate with clients that are pushing it over its balanced bandwidth allotment. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 146: Dcs

    Click this to have the Zyxel Device scan for and select an available channel immediately. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 147: Technical Reference

    1, 4, 7 and 11. While they are situated sufficiently close to both each other and the three so-called “safe” channels (1,6 and 11) that interference becomes inevitable, the severity of it is dependent upon other factors: proximity to the affected AP, signal strength, activity, and so on. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 148 AP has the bandwidth to spare. If too many people connect and the AP hits its bandwidth cap then all new connections must basically wait for their turn or get shunted to the nearest identical AP. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 149: Bluetooth

    12.2 Bluetooth Advertising Settings The Zyxel Device communicates with another BLE enabled device for advertisements. Use this screen to configure up to five beacon IDs to be included in the advertising packet. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 150: Edit Advertising Settings

    Select an entry in the Configuration > Bluetooth > Advertising Settings screen and click the Edit icon to open the Edit Advertising screen. Use this screen to configure the beacon ID in the Bluetooth advertising packets. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 151 Enter an integer from 0 to 65535 as the minor value to identify the individual beacon. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 152: Overview

    Perform basic diagnostics (CLI) Access Users user Used for the embedded RADIUS server and SNMPv3 user access Browse user-mode commands (CLI) Note: The default admin account is always authenticated locally, regardless of the authentication method setting. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 153: User Summary

    13.2.1.1 Rules for User Names Enter a user name from 1 to 31 characters. The user name can only contain the following characters: • Alphanumeric A-z 0-9 (there is no unicode support) • _ [underscores] • - [dashes] NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 154 Enter the password of this user account. It can consist of 4 - 63 alphanumeric characters. Retype Re-enter the password to make sure you have entered it correctly. Description Enter the description of each user, if any. You can use up to 60 printable ASCII characters. Default descriptions are provided. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 155: Setting

    13.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the Zyxel Device. To access this screen, login to the Web Configurator, and click Configuration > Object > User > Setting. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 156 This is the default lease time in minutes for each type of user account. It defines the number of minutes the user has to renew the current session before the user is logged out. Admin users renew the session every time the main screen refreshes in the Web Configurator. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 157: Edit User Authentication Timeout Settings

    You can still manually configure any user account’s authentication timeout settings. To access this screen, go to the Configuration > Object > User > Setting screen, select one of the Default Authentication Timeout Settings entry and click the Edit icon. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 158 0 to make the number of minutes unlimited. Unlike Lease Time, the user has no opportunity to renew the session without logging out. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 159: Ap Profile

    The SSID (Service Set IDentifier) is the name that identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. In other words, it is the name of the WiFi network that clients use to connect to it. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 160 WiFi 6 (IEEE 802.11ax) WiFi 6 (802.11ax) is a WiFi standard that supports both 2.4 GHz and 5 GHz frequency bands and brings the following improvements over WiFi 5: Faster Data Transmission WiFi 6 allows faster data transmission using: NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 161 Table 57 WiFi 6 and WiFi 6E Comparison FEATURES WIFI 6 WIFI 6E Theoretical Maximum Speed (Up-to) The same (9.6 Gbps). Supported Frequency Bands 2.4 GHz/5 GHz 2.4 GHz/5 GHz/6 GHz Supported Channel Bandwidth 20/40/80/160 MHz 20/40/80/160 MHz NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 162 WIFI 6E WIFI 7 Theoretical Maximum Speed (Up-to) The same (9.6 Gbps). 46 Gbps Supported Frequency Bands 2.4 GHz/5 GHz 2.4 GHz/5 GHz/6 GHz 2.4 GHz/5 GHz/6 GHz Supported Channel Bandwidth 20/40/80/160 MHz 20/40/80/160 MHz 20/40/80/160/320 MHz NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 163 4K/8K videos, using augmented reality (AR), virtual reality (VR) applications and playing online games. To use MLO, both the AP and the WiFi client have to support MLO. Note: The Zyxel Device does not support MLO at the time of writing. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 164: Radio

    This screen allows you to create radio profiles for the Zyxel Device. A radio profile is a list of settings that an Zyxel Device can use to configure its radio transmitter(s). To access this screen click Configuration > Object > AP Profile. Note: You can have a maximum of 32 radio profiles on the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 165: Add/Edit Radio Profile

    This screen allows you to create a new radio profile or edit an existing one. To access this screen, click the Add button or select a radio profile from the list and click the Edit button. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 166 Chapter 14 AP Profile Figure 105 Configuration > Object > AP Profile > Radio > Add/Edit NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 167 11ax: allows IEEE802.11ax compliant WLAN devices to associate with the Zyxel Device. • 11be: allows IEEE802.11be compliant WLAN devices to associate with the Zyxel Device. If the WLAN device isn’t compatible with 802.11be, the Zyxel Device will communicate with the WLAN device using 802.11ax. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 168 Channel ID This field is available only when you set Channel Selection to DCS and set 2.4 GHz Channel Selection Method to manual. Select the channels that you want the Zyxel Device to use. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 169 Select the channels that you want the Zyxel Device to use. Time Interval Select this option to have the Zyxel Device survey the other APs within its broadcast radius at the end of the specified time interval. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 170 WiFi network before the AP will fragment the packet into smaller data frames. A large fragmentation threshold is recommended for networks not prone to interference. A smaller threshold is recommended for busy networks or networks that are prone to interference. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 171 802.11d is a WiFi network specification that allows the AP to broadcast a country code to WiFi client. The country code indicates where the AP is located. If WiFi clients are unable to connect to the AP due to an incompatible country code, you should disable 802.11d. Multicast Settings NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 172: Ssid

    WiFi adapter in a laptop), and is displayed as the WiFi network name when a person makes a connection to it. To access this screen, click Configuration > Object > AP Profile > SSID > SSID List. Note: You cannot add or remove an SSID profile after running the setup wizard. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 173 This field indicates which (if any) MAC filter Profile is associated with the SSID profile. Profile Layer-2 Isolation This field indicates which (if any) layer-2 isolation Profile is associated with the SSID profile. Profile VLAN ID This field indicates the VLAN ID associated with the SSID profile. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 174: Add/Edit Ssid Profile

    Web Configurator and is only for management purposes. Spaces and underscores are allowed. SSID Enter the SSID name for this profile. This is the name visible on the network to WiFi clients. Enter up to 32 characters, spaces and underscores are allowed. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 175 The range is from 0–160. Enter 0 to set the maximum rate to unlimited. VLAN ID Enter a VLAN ID for the Zyxel Device to use to tag traffic originating from this SSID. The range is from 1–4094. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 176: Security List

    Wireless security is implemented strictly between the AP broadcasting the SSID and the stations that are connected to it. To access this screen click Configuration > Object > AP Profile > SSID > Security List. Note: You can have a maximum of 32 security profiles on the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 177: Add/Edit Security Profile

    These screens’ options change based on the Security Mode selected. Note: 6 GHz SSIDs only support WPA3 encryption. The Zyxel Device will automatically use WPA3 encryption for 6 GHz SSIDs (SSIDs used by the 6 GHz radio) regardless of the Security Mode you select here. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 178 Enter the interval (in seconds) between authentication requests. Enter a 0 for unlimited Timer time. Advance Note: Click on the Show Advanced Settings button to show the fields describe below. Idle timeout Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 179 The NAS identifier is to identify the source of access request. It could be the NAS’s fully qualified domain name. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 180 (wpa3 or enhanced-open) and fallback (wpa2 or none) security method. Advance Note: Click on the Show Advanced Settings button to show the fields described below. Idle timeout Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 181 If Required is selected, WiFi clients must support MFP in order to join the Zyxel Device’s WiFi network. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 182 LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 183 Enter the shared secret password of the RADIUS server to be used for authentication. Primary / Secondary Select the checkbox to enable user accounting through an external authentication Accounting Server server. Activate Accounting Server Enter the IP address of the external accounting server in dotted decimal notation. IP Address NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 184 The NAS identifier is to identify the source of access request. It could be the NAS’s fully qualified domain name. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 185 LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 186 MFP. If Required is selected, WiFi clients must support MFP in order to join the Zyxel Device’s WiFi network. Radius Settings The Radius Settings fields are only available when you set Authentication Settings to Enterprise. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 187 The NAS identifier is to identify the source of access request. It could be the NAS’s fully qualified domain name. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 188 LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 189 Enter a password (up to 128 alphanumeric characters) as the key to be shared between Secret the external accounting server and the Zyxel Device. The key must be the same on the external accounting server and your Zyxel Device. The key is not sent over the network. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 190 The NAS identifier is to identify the source of access request. It could be the NAS’s fully qualified domain name. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 191 LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 192 MFP. If Required is selected, WiFi clients must support MFP in order to join the Zyxel Device’s WiFi network. Radius Settings The Radius Settings fields are only available when you set Authentication Settings to Enterprise. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 193: Creating A Security Profile

    Profile Name Security_Profile1 Security Mode WPA3 Authentication Personal Pre-Shared Key zyxel1234 Go to Configuration > Object > AP Profile > SSID > Security List. Click Add to create a new security profile on the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 194: Mac Filter List

    14.5 MAC Filter List This screen allows you to create and manage security configurations that can be used by your SSIDs. To access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 195: Add/Edit Mac Filter Profile

    This screen allows you to create a new MAC filtering profile or edit an existing one. To access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of 512 MAC addresses. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 196: Layer-2 Isolation List

    In the following example, layer-2 isolation is enabled on the Zyxel Device to allow a guest WiFi client (A) to access the main network router (B). The router provides access to the Internet and the network printer NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 197 Click this to edit the selected layer-2 isolation profile. Remove Click this to remove the selected layer-2 isolation profile. Object Click this to view which other objects are linked to the selected layer-2 isolation profile (for Reference example, SSID profile). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 198: Add/Edit Layer-2 Isolation Profile

    This field specifies a MAC address associated with this profile. You can click the MAC address to make it editable. Description This field displays a description for the MAC address associated with this profile. You can click the description to make it editable. Enter up to 60 characters, spaces and underscores allowed. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 199 Table 74 Configuration > Object > AP Profile > SSID > Layer-2 Isolation List > Add/Edit Layer-2 Isolation Profile (continued) LABEL DESCRIPTION Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 200: Wds Profile

    This field is a sequential value, and it is not associated with a specific profile. Profile Name This field indicates the name assigned to the profile. WDS SSID This field shows the SSID specified in this WDS profile. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 201: Add/Edit Wds Profile

    64 hexadecimal characters. The key is used to encrypt the traffic between the APs. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 202: Certificates

    Jenny receives the message and uses Tim’s public key to verify it. Jenny knows that the message is from Tim, and that although other people may have been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim’s private key). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 203 The Zyxel Device currently allows the importation of a PKS#7 file that contains a single certificate. • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 204: Verifying A Certificate

    Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may vary based on your situation. Possible examples would be over the telephone or through an HTTPS connection. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 205: My Certificates

    This field displays identifying information about the certificate’s owner, such as CN (Common Name), OU (Organizational Unit or department), O (Organization or company) and C (Country). It is recommended that each certificate have unique subject information. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 206: Add My Certificates

    Certificates screen. Use this screen to have the Zyxel Device create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request. Figure 124 Configuration > Object > Certificate > My Certificates > Add NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 207 My Certificate Edit screen to view the certification request and copy it to send to the locally for later certification authority. manual enrollment Copy the certification request from the My Certificate Edit screen and then send it to the certification authority. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 208: Edit My Certificates

    Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open the My Certificate Edit screen. You can use this screen to view in-depth certificate information and change the certificate’s name. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 209 Chapter 16 Certificates Figure 125 Configuration > Object > Certificate > My Certificates > Edit NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 210 “DigitalSignature” means that the key can be used to sign certificates and “KeyEncipherment” means that the key can be used to encrypt text. Extended Key This field displays for what EKU (Extended Key Usage) functions the certificate’s key can be Usage used. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 211: Import Certificates

    Zyxel Device. You can also import a certificate in PKCS#12 format, including the certificate’s public and private keys. The certificate you import replaces the corresponding request in the My Certificates screen. You must remove any spaces in the certificate’s filename before you can import it. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 212: Trusted Certificates

    This screen displays a summary list of certificates that you have set the Zyxel Device to accept as trusted. The Zyxel Device also accepts any valid certificate signed by a certificate on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certificates. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 213: Edit Trusted Certificates

    Click Configuration > Object > Certificate > Trusted Certificates and then a certificate’s Edit icon to open the Trusted Certificates Edit screen. Use this screen to view in-depth information about the certificate, change the certificate’s name and set whether or not you want the Zyxel Device to check a NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 214 Chapter 16 Certificates certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. Figure 128 Configuration > Object > Certificate > Trusted Certificates > Edit NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 215 Name (CN), Organizational Unit (OU), Organization (O) and Country (C). Issuer This field displays identifying information about the certificate’s issuing certification authority, such as Common Name, Organizational Unit, Organization and Country. With self-signed certificates, this is the same information as in the Subject Name field. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 216: Import Trusted Certificates

    Click Configuration > Object > Certificate > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to save a trusted certificate to the Zyxel Device. Note: You must remove any spaces from the certificate’s filename before you can import the certificate. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 217: Technical Reference

    The second is a reduction in network traffic since the Zyxel Device only gets information on the certificates that it needs to verify, not a huge list. When the Zyxel Device requests certificate status information, the OCSP server returns a “expired”, “current” or “unknown” response. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 218: System

    17.2 Host Name A host name is the unique name by which a device is known on a network. Click Configuration > System > Host Name to open this screen. Figure 130 Configuration > System > Host Name NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 219: Power Mode

    Note: Only enable this if you are using a passive PoE injector that is not IEEE 802.3at/bt compliant but can still provide full power. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 220: Date And Time

    This field displays the last updated time from the time server or the last time configured (hh:mm:ss) manually. When you set Time and Date Setup to Manual, enter the new time in this field and then click Apply. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 221 For example, if you set this field to 3.5, a log occurred at 6 P.M. in local official time will appear as if it had occurred at 10:30 P.M. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 222: Pre-Defined Ntp Time Servers List

    As an option you can select the Enable Daylight Saving checkbox to adjust the Zyxel Device clock for daylight savings. Click Apply. To get the Zyxel Device date and time from a time server: Click System > Date/Time. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 223: Www Overview

    You can set the Zyxel Device to use HTTP or HTTPS (HTTPS adds security) for Web Configurator sessions. HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol that NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 224: Configuring Www Service Control

    Note: If you disable HTTP in the WWW screen, then the Zyxel Device blocks all HTTP connection attempts. 17.5.4 Configuring WWW Service Control Click Configuration > System > WWW to open the WWW screen. Use this screen to specify HTTP or HTTPS settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 225 Zyxel Device. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 226: Https Example

    When you attempt to access the Zyxel Device HTTPS server, a Warning screen appears as shown in the following screen. Click Learn More... if you want to verify more information about the certificate from the Zyxel Device. Click Advanced > Accept the Risk and Continue. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 227: Enrolling And Importing Ssl Client Certificates

    You must have imported at least one trusted CA to the Zyxel Device in order for the Authenticate Client Certificates to be active (see the Certificates chapter for details). Apply for a certificate from a Certification Authority (CA) that is trusted by the Zyxel Device (see the Zyxel Device’s Trusted Certificates Web Configurator screen). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 228 Click Next to begin the wizard. The file name and path of the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 229 Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 230 Click Finish to complete the wizard and begin the import process. You should see the following screen when the certificate is correctly installed on your computer. 17.5.5.6 Using a Certificate When Accessing the Zyxel Device To access the Zyxel Device through HTTPS: NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 231: Ssh

    In the following figure, computer B on the Internet uses SSH to securely connect to the Zyxel Device (A) for a management session. Figure 140 SSH Communication Over the WAN Example NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 232: How Ssh Works

    After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server. The client then sends its authentication information (user name and password) to the server to log in to the server. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 233: Ssh Implementation On The Zyxel Device

    SSH connections. You must have certificates already configured in the My Certificates screen. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 234: Examples Of Secure Telnet Using Ssh

    Zyxel Device using SSH version 1. If this is the first time you are connecting to the Zyxel Device using SSH, a message displays prompting you to save the host information of the Zyxel Device. Type “yes” and press [ENTER]. Then enter the password to log in to the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 235: Ftp

    FTP connections. You must have certificates already configured in the My Certificates screen. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 236: Snmp

    In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations. • Set - Allows the manager to set values for object variables within an agent. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 237: Supported Mibs

    Use this screen to configure your SNMP settings. You can also configure user profiles that define allowed SNMPv3 access. Note: Not all Zyxel Device models support the SNMP feature. See the comparison table in Section 1.2 on page Figure 147 Configuration > System > SNMP NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 238: Adding Or Editing An Snmpv3 User Profile

    This screen allows you to add or edit an SNMPv3 user profile. To access this screen, click the Configuration > System > SNMP screen’s Add button or select a SNMPv3 user profile from the list and click the Edit button. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 239 Select whether the SNMPv3 user can have read-only or read and write access to the Zyxel Device using this SNMPv3 user profile. Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 240: Log And Report

    Note: Data collection may decrease the Zyxel Device’s traffic throughput rate. Click Configuration > Log & Report > Email Daily Report to display the following screen. Configure this screen to have the Zyxel Device email you system statistics every day. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 241 The following table describes the labels in this screen. Table 94 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION General Settings Enable Email Select this to send reports by email every day. Daily Report NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 242: Log Setting

    Active Log Summary screen to edit this information for all logs at the same time. 18.3.1 Log Setting Screen To access this screen, click Configuration > Log & Report > Log Setting. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 243: Edit System Log Settings

    This screen controls the detailed settings for each log in the system log (which includes the email profiles). Select a system log entry in the Log Setting screen and click the Edit icon. Note: The E-mail Server fields will not appear if your Zyxel Device does not support email daily report. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 244 Chapter 18 Log and Report Figure 151 Configuration > Log & Report > Log Setting > Edit System Log Setting NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 245 Zyxel Device will email logs to them. enable normal logs and debug logs (yellow check mark) - create log messages, alerts, and debugging information for all categories. The Zyxel Device does not email debugging information, even if this setting is selected. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 246 Message field. The range is 1-600 seconds. Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 247: Edit Remote Server

    Address Log Facility Select a log facility. The log facility allows you to log the messages to different files in the syslog server. Please see the documentation for your syslog program for more information. Active Log NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 248: Active Log Summary

    It does not let you change other log settings. To access this screen, go to the Log Setting screen, and click the Active Log Summary button. Note: The E-mail Server fields will not appear if your Zyxel Device does not support email daily report. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 249 Figure 153 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 250 (green check mark) and/or in alerts (red exclamation point) for the email settings specified in E-Mail Server 1. The Zyxel Device does not email debugging information, even if it is recorded in the System log. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 251 (yellow check mark) - log regular information, alerts, and debugging information from this category Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 252: File Manager

    # change administrator password username admin password 4321 user-type admin #configure default radio profile, change 2GHz channel to 11 & Tx output power # to 50% wlan-radio-profile default 2g-channel 11 output-power 50% exit write NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 253: Errors In Configuration Files Or Shell Scripts

    Your configuration files or shell scripts can use “exit” or a command line consisting of a single “!” to have the Zyxel Device exit sub command mode. Note: “exit” or “!'” must follow sub commands if it is to make the Zyxel Device exit sub command mode. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 254 Download a configuration file from Zyxel Device1. You must upload this configuration file using the private key you created on Zyxel Device1 to Zyxel Device2 even if Sensitive Data Protection is not enabled on Zyxel Device2. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 255: Configuration File

    • You can change the way the startup-config.conf file is applied. Include the setenv-startup stop- on-error off command. The Zyxel Device ignores any errors in the startup-config.conf file and applies all of the valid commands. The Zyxel Device still generates a log for any errors. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 256 Chapter 19 File Manager Figure 155 Maintenance > File Manager > Configuration File Do not turn off the Zyxel Device while configuration file upload is in progress. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 257 Specify a name for the duplicate configuration file. Use up to 25 characters (including a-zA-Z0- 9;‘~!@#$%^&()_+[]{}’,.=-). Click OK to save the duplicate or click Cancel to close the screen without saving a duplicate of the configuration file. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 258 Zyxel Device last restarted. If you upload and apply a configuration file with an error, you can apply lastgood.conf to return to a valid configuration. Size This column displays the size (in KB) of a configuration file. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 259: Example Of Configuration File Download Using Ftp

    Connect your computer to the Zyxel Device. The FTP server IP address of the Zyxel Device in standalone mode is 192.168.1.2, so set your computer to use a static IP address from 192.168.1.3 ~192.168.1.254. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 260: Firmware Package

    10 Enter “quit” to exit the ftp prompt. 19.3 Firmware Package Click Maintenance > File Manager > Firmware Package to open this screen. Use the Firmware Package screen to check your current firmware version and upload firmware to the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 261 Click Upload to begin the upload process. This process may take up to two minutes. Check now Click Check now to view the firmware information. The following message appears when there is a new firmware version available for your Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 262 Maintenance > File Manager > Firmware Package screen to upload the new firmware. Figure 161 Firmware Download Failed. Download Manually. After you see the Firmware Upload in Process screen, wait two minutes before logging into the Zyxel Device again. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 263: Example Of Firmware Upload Using Ftp

    331 User admin OK. Password required Password: 230 OK. Current restricted directory is / ftp> hash Hash mark printing On ftp: (2048 bytes/hash mark) . ftp> bin 200 TYPE is now 8-bit binary ftp> put C:\ftproot\Zyxel Device_FW\600ABFH0C0.bin NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 264: Shell Script

    Specify the new name for the shell script file. Use up to 25 characters (including a-zA-Z0- 9;‘~!@#$%^&()_+[]{}’,.=-). Click OK to save the duplicate or click Cancel to close the screen without saving a duplicate of the configuration file. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 265 Type in the location of the file you want to upload in this field or click Browse... to find it. Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 266: Diagnostics

    The Debug Information Collector screen then displays showing whether the collection is in progress, was successful, or has failed. When the data collection is done, click Download to save the most recent diagnostic file to a computer. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 267: Remote Capture

    Zyxel Device. The default port number is 2002. Start Click this button to allow the packet analyzer to start capturing traffic going through the Zyxel Device. Stop Click this button to stop the packet analyzer from capturing traffic going through the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 268: Leds

    Note: When the Zyxel Device is booting or performing firmware upgrade, the LEDs will light up regardless of the setting in LED suppression. To access this screen, click Maintenance > LEDs > Suppression. Figure 167 Maintenance > LEDs > Suppression NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 269: Locator Screen

    Zyxel Device between several devices in the network. Otherwise, click Turn Off to disable the locator feature. Automatically Extinguish Enter a time interval between 1 and 60 minutes to stop the locator LED from blinking. After Default is 10 minutes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 270 Chapter 21 LEDs Table 105 Maintenance > LED > Locator LABEL DESCRIPTION Apply Click Apply to save changes in this screen. Refresh Click Refresh to update the information in this screen. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 271: Antenna Switch

    Note: The antenna switch in the Web Configurator has priority over the physical antenna switch after you Enable Software Control in the Maintenance > Antenna screen. By default, software control is disabled. 22.2 Antenna Switch Screen To access this screen, click Maintenance > Antenna. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 272 Select Wall if you mount the Zyxel Device to a wall. Select Ceiling if the Zyxel Device is mounted on a ceiling. You can switch from Wall to Ceiling if there are still wireless dead zones, and vice versa. Click Apply to save your changes or click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 273: Reboot

    This screen allows remote users to restart the Zyxel Device. To access this screen, click Maintenance > Reboot. You can reboot your Zyxel Device when the Internet connection is slow or intermittent. Figure 172 Maintenance > Reboot NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 274 After the Zyxel Device reboots, wait a few minutes until the login screen appears. If the login screen does not appear, type the IP address of the Zyxel Device in your Web browser. You can also use the CLI command reboot to restart the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 275: Local Configuration In Cloud Mode

    Local Configuration in Cloud Mode...
  • Page 276: Cloud Mode

    LAN IP address (192.168.1.2). Figure 173 Cloud Mode Application 24.2 Cloud Mode Web Configurator Screens When your Zyxel Device is managed through NCC, you can access only the following screens through the Web Configurator: NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 277: Dashboard

    This field displays the channel number the Zyxel Device is using and its output power in the 5 Information GHz spectrum. This shows Not activated if the wireless LAN is disabled. Use Proxy to This displays whether the NAP uses a proxy server to access the NCC (Nebula Control Access NCC Center). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 278 Note: The switch is always on and cannot be disabled when the Zyxel Device is in Cloud mode. If the Zyxel Device cannot connect to the Internet or to NCC, move the mouse over the status circle to check the error message. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 279: Network

    (Section 25.3 on page 281) configures the Zyxel Device’s VLAN settings. 25.2 IP Setting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click Configuration > Network > IP Setting. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 280 Enter service port number used by the proxy server. Authentication Select this option if the proxy server requires authentication before it grants access to the Internet. User Name Enter your proxy user name. Password Enter your proxy password. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 281: Vlan

    Set whether the Zyxel Device adds the VLAN ID to outbound traffic transmitted through its Tagged Ethernet port. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 282: Maintenance

    Click Maintenance > Shell Script to open this screen. Use the Shell Script screen to store, name, download, and upload shell script files. You can store multiple shell script files on the Zyxel Device at the same time. Figure 177 Maintenance > Shell Script NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 283 In the text editor, save the shell script with a .zysh filename extension. Select All Files as the file type. Go to the Maintenance > Shell Script screen. Click Browse to upload the .zysh file. Click Upload. The uploaded shell script will be shown in the Shell Scripts field. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 284 Type in the location of the file you want to upload in this field or click Browse... to find it. Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 285: Diagnostics

    Note: Not all models support wireless remote capture. See Section 1.2 on page 14 for the models that support remote capture on wireless interfaces. Click Maintenance > Diagnostics > Remote Capture to open the Remote Capture screen. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 286: View Log

    Events that generate an alert (as well as a log message) display in red. Regular logs display in black. Click a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 287 63 alphanumeric characters and the underscore, as well as punctuation marks ()’ ,:;?! +-*/= #$% @ ; the period, double quotes, and brackets are not allowed. Search This displays when you show the filter. Click this button to update the log using the current filter settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 288 This field displays the destination interface of the packet that generated the log message. Interface Protocol This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 289: Appendices And Troubleshooting

    Appendices and Troubleshooting...
  • Page 290: Troubleshooting

    If none of these steps work, you may have faulty hardware and should contact your Zyxel Device vendor. The LED does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 3.3 on page Check the hardware connections. See the Quick Start Guide. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 291: Zyxel Device Management, Access, And Login

    Check the DHCP IP address assigned to your Zyxel Device on the connected router. • If there is no DHCP server on your network, make sure your computer’s IP address is in the same subnet as the Zyxel Device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 292 Disconnect and re-connect the power adapter or PoE power injector to restart the Zyxel Device. If this does not work, you have to reset the Zyxel Device to its factory defaults. See Section 27.6 on page 300. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 293 The Zyxel Device is already registered with NCC, but it is still in standalone mode; it cannot connect to the NCC. Check the Zyxel Device LED and make sure the Zyxel Device is on and ready for use. Make sure that NCC Discovery is enabled (see Section 10.6 on page 131). NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 294 Make sure the NCC can access the Zyxel Device. Check your network’s firewall/security settings. Make sure the following ports are allowed: • TCP: 443, 4335, and 6667 • UDP: 123 After changing your Zyxel Device settings using the NCC, wait 1-2 minutes for the changes to take effect. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 295 GHz band, 5 GHz band or 6 GHz band's channels or enabling DCS to let APs scan the best channel to use. This can help to minimize co-channel interference between the APs. I only want certain users to access specific parts of my network. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 296: Internet Access

    There might be a lot of traffic on the network. Look at the LEDs, and check Section 3.3 on page 41. If the Zyxel Device is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 297: Wifi Network

    Zyxel Device’s active radio. For example, 6 GHz WiFi networks are only available for WiFi clients that support WiFi 6E or higher standards. The WiFi connection is slow or intermittent. The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 298 If a RADIUS server authenticates wireless stations, the re-authentication timer on the RADIUS server has priority over the setting in the Zyxel Device. Change the RADIUS server’s configuration if you need to use a different re-authentication timer setting. I forgot the WiFi password. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 299 Zyxel Device, then load balancing may not be as effective. In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicator associated with any Zyxel Devices assigned to the load balancing task. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 300: Resetting The Zyxel Device

    Release the RESET button, and wait for the Zyxel Device to restart. You should be able to access the Zyxel Device in standalone mode using the default settings. 27.7 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more troubleshooting suggestions. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 301: Appendix A Importing A Certificate

    Trusted Root CA, as shown in the following tutorials. The Importing process is quite similar between Google Chrome and Microsoft Edge. The following procedures in Google Chrome can apply the same way in Microsoft Edge. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 302 Open Google Chrome browser. Click the three dots on the upper right corner. Choose Settings In Google Chrome, click Privacy and security > Security > Manage certificates. In Microsoft Edge, click Privacy, search, and services > Manage certificates. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 303 Appendix A Importing a Certificate Select the Trusted Root Certification Authorities tab and click Import. Click Next to proceed to the Certificate Import Wizard. Click Browse to select a certificate already saved in your computer and click Next to continue. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 304 CA certificate or a personal certificate, and install it into the appropriate certificate store. The other option is Place all certificates in the following store. With this option, you can choose the desired folder for the certificate store. After selection, click Next. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 305 Appendix A Importing a Certificate The security warning message shows up and click Yes. Click Finish. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 306 Remove a Certificate in Google Chrome and Microsoft Edge This section shows you how to remove a public key certificate in Google Chrome and Microsoft Edge on Windows 10 Pro. Open your web browser, click the menu icon, and click Settings. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 307 Appendix A Importing a Certificate In Google Chrome, click Privacy and security > Security > Manage certificates. In Microsoft Edge, click Privacy, search, and services > Manage certificates. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 308 The following example uses Mozilla Firefox on Windows 10 Pro. You first have to store the certificate in your computer and then install it as a Trusted Root CA. To import a certificate to the Firefox browser, please follow the steps below. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 309 Open Firefox browser and click Option bar with three horizontal lines on the upper right corner. Click Settings. Click Privacy & Security. On the screen of Privacy & Security, scroll down to find Certificates and click View Certificates. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 310 IP or domain name. Confirm that the client's used IP or domain name aligns with the Common Name on the certificate. If all the information on the certificate is correct, close the certificate screen and click OK. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 311 To check if the import is successful, click Import to select the same certificate again to see if the alert “This certificate is already installed as a certificate authority” pops out. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 312 Open Firefox browser and click Option bar with three horizontal lines on the upper right corner. Click Settings. Click Privacy & Security. On the screen of Privacy & Security, scroll down to find Certificates and click View Certificates. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 313 In the Certificate Manager, click Authorities and select the certificate you want to remove. Click Delete or Distrust. In the following dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 314: Appendix B Ipv6

    54 bits 64 bits Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 315: Loopback Address

    The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 115 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 316: Subnet Masking

    DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP. In IPv6, all network interfaces can be associated with several addresses. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 317: Dhcp Relay Agent

    2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the Zyxel Device passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 318 Group Management Protocol version 2 (IGMPv2). MLD uses ICMPv6 message types, rather than IGMP message types. MLDv1 is equivalent to IGMPv2 and MLDv2 is equivalent to IGMPv3. MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 319: Mld Messages

    DHCPv6 client software on your Windows XP. (Note: If you use static IP addresses or Router Advertisement for IPv6 address assignment in your network, ignore this section.) This example uses Dibbler as the DHCPv6 client. To enable DHCPv6 client on your computer: NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 320 Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 321 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 322: Appendix C Customer Support

    • Date that you received your device. • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com Asia China • Zyxel Communications Corporation–China Office •...
  • Page 323 • https://www.zyxel.com/global/en Philippines • Zyxel Communications Corp. • https://www.zyxel.com/global/en Singapore • Zyxel Communications Corp. • https://www.zyxel.com/global/en Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com/tw/zh Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th Vietnam • Zyxel Communications Corporation–Vietnam Office • https://www.zyxel.com/vn/vi...
  • Page 324 Appendix C Customer Support • https://www.zyxel.com/bg/bg Czech Republic • Zyxel Communications Czech s.r.o. • https://www.zyxel.com/cz/cs Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da Finland • Zyxel Communications • https://www.zyxel.com/fi/fi France • Zyxel France • https://www.zyxel.com/fr/fr Germany • Zyxel Deutschland GmbH. • https://www.zyxel.com/de/de Hungary •...
  • Page 325 • Zyxel Communications A/S • https://www.zyxel.com/se/sv Switzerland • Studerus AG • https://www.zyxel.com/ch/de-ch • https://www.zyxel.com/fr/fr Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en-gb Ukraine • Zyxel Ukraine • https://www.zyxel.com/ua/uk-ua South America Argentina • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Brazil •...
  • Page 326 Ecuador • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co South America • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Middle East Israel • Zyxel Communications Corp. • https://il.zyxel.com North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en-us NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 327: Appendix D Legal Information

    10,000 feet. • Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems. Brazil The following applies if you use the product within Brazil. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 328 Antenna types not included in this list that have a gain greater than the maximum gain indicated for any type listed, are strictly prohibited for use with this device. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 329: Antenna Information

    U-NII-6:3.34 dBi U-NII-7:2.64 dBi U-NII-8:3.35 dBi WAX620D-6E PIFA U.FL 1 dBi U-NII-1:3.87 dBi U-NII-2A:3.96 dBi NWA220AX-6E U-NII-2C:4.54 dBi U-NII-3:3.04 dBi U-NII-5:3.87 dBi U-NII-6:4.26 dBi U-NII-7:5.34 dBi U-NII-8:3.42 dBi WAX655E Dipole N type 4 dBi 6 dBi NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 330 Sciences et Développement économique Canada pour fonctionner avec les types d'antenne énumérés ci dessous et ayant un gain admissible maximal. Les types d'antenne non inclus dans cette liste, et dont le gain est supérieur au gain maximal indiqué pour tout type figurant sur la liste, sont strictement interdits pour l'exploitation de l'émetteur. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 331 U-NII-6:3.34 dBi U-NII-7:2.64 dBi U-NII-8:3.35 dBi WAX620D-6E PIFA U.FL 1 dBi U-NII-1:3.87 dBi U-NII-2A:3.96 dBi NWA220AX-6E U-NII-2C:4.54 dBi U-NII-3:3.04 dBi U-NII-5:3.87 dBi U-NII-6:4.26 dBi U-NII-7:5.34 dBi U-NII-8:3.42 dBi WAX655E Dipole N type 4 dBi 6 dBi NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 332: Industry Canada Radiation Exposure Statement

    (vi) Utilisation interdite à bord de plateformes de forage pétrolier, de voitures, de trains, de bateaux et d’aéronefs, sauf à bord d’un gros aéronef volant à plus de 10 000 pieds d’altitude. (vii) Les dispositifs ne doivent pas être utilisés pour commander des systèmes d’aéronef sans pilote ni pour communiquer avec de tels systèmes. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 333 • The band 5,470 MHz to 5,725 MHz is 796.16 mW. WAX300H • The band 2,400 MHz to 2,483.5 MHz is 89.13 mW, • The band 5,150 MHz to 5,350 MHz is 198.15 mW, • The band 5,470 MHz to 5,725 MHz is 485.29 mW. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 334 Erklærer herved Zyxel at dette utstyret er I samsvar med de grunnleggende kravene og andre relevante bestemmelser I (Norwegian) direktiv 2014/53/EU. Polski (Polish) Niniejszym Zyxel oświadcza, że sprzęt jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 2014/53/EU. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 335: Safety Warnings

    Do not remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to a power outlet. • Do not allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 336: Disposal And Recycling Information

    Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 337: About The Symbols

    Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 338: Zyxel Limited Warranty

    Open Source Licenses This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. To request the source code covered under these licenses, please go to: https://www.zyxel.com/form/gpl_oss_software_notice.shtml. NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 339: Index

    210, 215 BLE. See Bluetooth Low Energy storage space 205, 213 advertisements thumbprint algorithms advertising settings thumbprints used for authentication Bluetooth Low Energy 15, 16, 17, 18, 19, 21, 149 verifying fingerprints Bluetooth Smart NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 340 66, 261 CPU usage 66, 69 uploading 260, 261 current date/time 67, 220 uploading with FTP daylight savings flash usage setting manually 38, 235 time server and certificates customer support with Transport Layer Security (TLS) date Guide NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 341 EUI-64 global address interface ID link-local address Neighbor Discovery Protocol MAC address ping range prefix Management Information Base (MIB) 236, 237 prefix length Management Mode stateless autoconfiguration CAPWAP and DHCP unspecified address management mode Management, NCC NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 342 Service Set Identifier power on see SSID product registration shell scripts Public-Key Infrastructure (PKI) downloading 265, 284 editing 264, 282 public-private key pairs how applied managing 264, 282 syntax uploading 265, 284 Simple Network Management Protocol, see SNMP NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 343 156, 158 supported browsers default reauthentication time 157, 158 lease time syslog 243, 247 limited-admin (type) system name 65, 219 lockout system uptime reauthentication time system-default.conf types of user (type) user names NWA/WAC/WAX/WBE Series User’s Guide...
  • Page 344 Wireless Distribution System (WDS) wireless LAN wireless network example overview wireless profile layer-2 isolation MAC filtering radio security SSID wireless security 26, 297 wireless station Wizard Setup WLAN interface WPA2 and certificates see also HTTP, HTTPS NWA/WAC/WAX/WBE Series User’s Guide...

Table of Contents