ZyXEL Communications ZYAIR G-1000 User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Wireless Access Point
  5. ZYAIR G-1000
  6. User manual
ZyXEL Communications ZYAIR G-1000 User Manual

ZyXEL Communications ZYAIR G-1000 User Manual

Wireless 54 mbps access point
Hide thumbs Also See for ZYAIR G-1000:
Table of Contents

Advertisement

Quick Links

Download this manual
ZyAIR G-1000
Wireless 54 Mbps Access Point
User's Guide
Version 3.50
July 2003

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications ZYAIR G-1000

Summary of Contents for ZyXEL Communications ZYAIR G-1000

  • Page 1 ZyAIR G-1000 Wireless 54 Mbps Access Point User's Guide Version 3.50 July 2003...
  • Page 2 Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
  • Page 3 ZyAIR G-1000 Access Point User’s Guide Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.

  • Page 4: Zyxel Limited Warranty

    Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid.

  • Page 5: Customer Support

    ZyAIR G-1000 Access Point User’s Guide Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it.

  • Page 7: Table Of Contents

    Customer Support............................v List of Figures..............................xii List of Tables..............................xv Preface................................xvii GETTING STARTED............................. I Chapter 1 Getting to Know Your ZyAIR ....................1-1 Introducing the ZyAIR G-1000 Access Point ................1-1 ZyAIR Features..........................1-1 Applications for the ZyAIR......................1-3 1.3.1 Internet Access Application ....................1-3 1.3.2 Corporation Network Application..................1-4 Chapter 2 Hardware Installation and Initial Setup ..................2-1...
  • Page 8 ZyAIR G-1000 Access Point User’s Guide 5.1.3 ESS ............................5-2 Wireless LAN Basics.........................5-3 5.2.1 RTS/CTS..........................5-3 5.2.2 Fragmentation Threshold ....................5-4 Configuring Wireless .........................5-5 Configuring Roaming ........................5-6 5.4.1 Requirements for Roaming ....................5-7 Chapter 6 Wireless Security........................6-1 Wireless Security Overview.......................6-1 WEP Overview ..........................6-1 6.2.1 Data Encryption .........................6-1...
  • Page 9 ZyAIR G-1000 Access Point User’s Guide 9.5.1 Backup Configuration ......................9-7 9.5.2 Restore Configuration ......................9-8 9.5.3 Back to Factory Defaults....................9-10 SMT CONFIGURATION..........................V Chapter 10 Introducing the SMT ......................10-1 10.1 Connect to your ZyAIR Using Telnet ..................10-1 10.2 Entering Password........................10-1 10.3 Changing the System Password ....................10-1 10.4 ZyAIR SMT Menu Overview Example ...................10-2...
  • Page 10 ZyAIR G-1000 Access Point User’s Guide 17.1 Filename Conventions ......................17-1 17.2 Backup Configuration......................17-2 17.2.1 Backup Configuration Using FTP..................17-2 17.2.2 Using the FTP command from the DOS Prompt .............17-3 17.2.3 Backup Configuration Using TFTP .................17-4 17.2.4 Example: TFTP Command ....................17-4 17.3 Restore Configuration......................17-5 17.4 Uploading Firmware and Configuration Files .................17-6...
  • Page 11 ZyAIR G-1000 Access Point User’s Guide Appendix K Log Descriptions ........................K-1 Appendix L Power Adaptor Specifications ....................L-1 Appendix M Index .............................M-1 Table of Contents...

  • Page 12: List Of Figures

    ZyAIR G-1000 Access Point User’s Guide List of Figures Figure 1-1 Internet Access Application......................1-4 Figure 1-2 Corporation Network Application....................1-4 Figure 2-1 ZyAIR Front Panel........................2-1 Figure 2-2 ZyAIR Top Panel ..........................2-2 Figure 3-1 Change Password Screen ......................3-1 Figure 3-2 Web Configurator: Main Menu .....................3-3 Figure 4-1 System General Setup ........................4-1...
  • Page 13 ZyAIR G-1000 Access Point User’s Guide Figure 9-13 Back to Factory Default......................9-10 Figure 9-14 Reset Warning Message......................9-11 Figure 10-1 Login Screen ..........................10-1 Figure 10-2 Menu 23.1 System Security : Change Password ..............10-2 Figure 10-3 SMT Menu Overview....................... 10-3 Figure 10-4 SMT Main Menu ........................
  • Page 14 ZyAIR G-1000 Access Point User’s Guide Figure 19-1 Telnet Configuration on a TCP/IP Network ................19-1 Figure 19-2 Menu 24.11 Remote Management Control ................19-2 List of Figures...

  • Page 15: List Of Tables

    ZyAIR G-1000 Access Point User’s Guide List of Tables Table 2-1 Front Panel LED Description......................2-2 Table 2-2 ZyAIR G-1000 Wireless LAN Coverage ..................2-4 Table 4-1 System General Setup ........................4-2 Table 4-2 Password ............................4-3 Table 4-3 Time/Date............................4-4 Table 5-1 Wireless............................
  • Page 16 ZyAIR G-1000 Access Point User’s Guide Table 17-3 General Commands for Third Party TFTP Clients ..............17-5 Table 18-1 Menu 24.10 System Maintenance: Time and Date Setting ............18-2 Table 19-1 Menu 24.11 Remote Management Control.................19-2 List of Tables...

  • Page 17: Preface

    Congratulations on your purchase of the ZyAIR G-1000. ZyAIR G-1000 is an IEEE802.11g-compliant 54 Mbps Ethernet wireless LAN Access Point (AP). It is suited for wireless connection to the wired network in the home and small office environment allowing users to enjoy the convenience of wireless LAN access.
  • Page 18 For brevity’s sake, we will use “e.g.,” as a shorthand for “for instance”, and “i.e.,” for “that is” or “in other words” throughout this manual. • The ZyAIR G-1000 Access Point may be referred to simply as the “ZyAIR”, the “access point” or the “ZyAIR G-1000” in the user’s guide. xviii...

  • Page 19: Getting Started

    Getting Started Part I: GETTING STARTED This part introduces the main features and applications of ZyAIR, hardware installation and setup and shows how to access the web configurator.

  • Page 21: Chapter 1 Getting To Know Your Zyair

    This chapter introduces the main features and applications of the ZyAIR. Introducing the ZyAIR G-1000 Access Point The ZyAIR G-1000 Access Point extends the range of your existing wired network without any additional wiring efforts, providing easy network access to mobile users.
  • Page 22 LED off even when the ZyAIR is on and data is being transmitted/received. 802.11g Wireless LAN Standard ZyAIR products containing the letter “G” in the model name, such as ZyAIR G-1000, ZyAIR G-2000, support the 802.11g wireless standard.

  • Page 23: Applications For The Zyair

    ZyAIR G-1000 Access Point User’s Guide SNMP SNMP (Simple Network Management Protocol) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP agent functionality, which allows a manger station to manage and monitor the ZyAIR through the network.

  • Page 24: Corporation Network Application

    ZyAIR G-1000 Access Point User’s Guide Figure 1-1 Internet Access Application 1.3.2 Corporation Network Application In situations where users are always on the move in the coverage area but still need access to corporate network access, the ZyAIR is an ideal solution for wireless stations to connect to the corporate network without expensive network cabling.

  • Page 25: Chapter 2 Hardware Installation And Initial Setup

    ZyAIR G-1000 Access Point User’s Guide Chapter 2 Hardware Installation and Initial Setup This chapter describes the physical features of the ZyAIR and how to make cable connections. Front Panel of the ZyAIR The LEDs on the front panel indicate the operational status of your ZyAIR.

  • Page 26: Top Panel And Connections Of The Zyair

    ZyAIR G-1000 Access Point User’s Guide Table 2-1 Front Panel LED Description COLOR STATUS DESCRIPTION Link Blinking The ZyAIR is not ready or rebooting. The ZyAIR is working properly. ZyAIR Blue Breathing The ZyAIR is sending/receiving data. (WLAN On (dim) The ZyAIR is ready, but is not sending/receiving data.

  • Page 27: One 10/100M Ethernet Port

    ZyAIR G-1000 Access Point User’s Guide 2.2.1 One 10/100M Ethernet Port Ethernet 10Base-T/100Base-T networks use Shielded Twisted Pair (STP) cable with RJ-45 connectors that look like a bigger telephone plug with 8 pins. The ETHERNET port is auto-sensing, so you may use the crossover cable provided or a straight-through Ethernet cable to connect your ZyAIR to a computer/external hub.

  • Page 28: Hardware Mounting Options

    ZyAIR G-1000 Access Point User’s Guide Table 2-2 ZyAIR G-1000 Wireless LAN Coverage ≤11 Mbps ≤ 5.5 Mbps or lower Indoor 50 m 80 m Outdoor 200 m 300 m Refer to the Quick Installation Guide for instructions to attach the antennas to the ZyAIR.

  • Page 29: Chapter 3 Introducing The Web Configurator

    ZyAIR G-1000 Access Point User’s Guide Chapter 3 Introducing the Web Configurator This chapter describes how to access the ZyAIR web configurator and provides an overview of its screens. The default IP address of the ZyAIR is 192.168.1.2. Accessing the ZyAIR Web Configurator Step 1.

  • Page 30: Resetting The Zyair

    ZyAIR G-1000 Access Point User’s Guide The ZyAIR automatically times out after five minutes of inactivity. Simply log back into the ZyAIR if this happens to you. Resetting the ZyAIR If you forget your password or cannot access the ZyAIR, you will need to reload the factory-default configuration file or use the RESET button on the top panel of the ZyAIR.

  • Page 31: Figure 3-2 Web Configurator: Main Menu

    ZyAIR G-1000 Access Point User’s Guide Click WIZARD SETUP for initial Click ADVANCED to configure advanced features such as configuration including general setup, SYSTEM (General, Password and Time settings), WIRELESS Wireless LAN setup and IP address LAN (Wireless, MAC Filter, Roaming, 802.1x, Local User assignment.

  • Page 33: System And Wireless Lan

    System and Wireless LAN Part II: SYSTEM AND WIRELESS LAN This part covers the System and Wireless LAN screens.

  • Page 35: Chapter 4 System Screens

    ZyAIR G-1000 Access Point User’s Guide Chapter 4 System Screens This chapter provides information on the System screens. System Overview This section provides information on general system setup. Configuring General Setup Click ADVANCED and then SYSTEM to open the General screen.

  • Page 36: Configuring Password

    ZyAIR G-1000 Access Point User’s Guide Table 4-1 System General Setup LABEL DESCRIPTION System Name Type a descriptive name to identify the ZyAIR in the Ethernet network. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-"...

  • Page 37: Setting The Time

    ZyAIR G-1000 Access Point User’s Guide If you forget your password (or the ZyAIR IP address), you will need to reset the ZyAIR. See the Resetting the ZyAIR section in for details. Figure 4-2 Password The following table describes the labels in this screen.

  • Page 38: Figure 4-3 Time Setting

    ZyAIR G-1000 Access Point User’s Guide Figure 4-3 Time Setting The following table describes the labels in this screen. Table 4-3 Time/Date LABEL DESCRIPTION Time Protocol Select the time protocol that your time server sends when you turn on the ZyAIR. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works.
  • Page 39 ZyAIR G-1000 Access Point User’s Guide Table 4-3 Time/Date LABEL DESCRIPTION Time Server Enter the IP address of your time server. Check with your ISP/network administrator if Address you are unsure of this information (the default is tick.stdtime.gov.tw). Current Time This field displays the time of your ZyAIR.

  • Page 41: Chapter 5 Wireless Configuration And Roaming

    ZyAIR G-1000 Access Point User’s Guide Chapter 5 Wireless Configuration and Roaming This chapter discusses how to configure Wireless and Roaming screens on the ZyAIR.. Wireless LAN Overview This section introduces the wireless LAN (WLAN) and some basic scenarios. 5.1.1 IBSS An Independent Basic Service Set (IBSS), also called an Ad-hoc network, is the simplest WLAN configuration.

  • Page 42: Ess

    ZyAIR G-1000 Access Point User’s Guide Figure 5-2 Basic Service set 5.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS).

  • Page 43: Wireless Lan Basics

    ZyAIR G-1000 Access Point User’s Guide Figure 5-3 Extended Service Set Wireless LAN Basics Refer also to the Wizard Setup chapter for more background information on Wireless LAN features, such as channels. 5.2.1 RTS/CTS A hidden node occurs when two stations are within range of the same access point, but are not within range of each other.

  • Page 44: Fragmentation Threshold

    ZyAIR G-1000 Access Point User’s Guide Figure 5-4 RTS/CTS When station A sends data to the ZyAIR, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.

  • Page 45: Configuring Wireless

    ZyAIR G-1000 Access Point User’s Guide A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size.

  • Page 46: Configuring Roaming

    ZyAIR G-1000 Access Point User’s Guide Table 5-1 Wireless LABEL DESCRIPTION ESSID (Extended Service Set IDentity) The ESSID identifies the Service Set with to which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same ESSID. Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN.

  • Page 47: Requirements For Roaming

    ZyAIR G-1000 Access Point User’s Guide channel of a new access point, which then informs the access points on the LAN about the change. The new information is then propagated to the other access points on the LAN. An example is shown in Figure 5-6.

  • Page 48: Figure 5-7 Roaming

    ZyAIR G-1000 Access Point User’s Guide 3. The adjacent access points should use different radio channels when their coverage areas overlap. 4. All access points must use the same port number to relay roaming information. 5. The access points must be connected to the Ethernet and be able to get IP addresses from a DHCP server if using dynamic IP address assignment.

  • Page 49: Chapter 6 Wireless Security

    ZyAIR G-1000 Access Point User’s Guide Chapter 6 Wireless Security This chapter describes how to configure WEP encryption, MAC filter, 802.1x, Local User Database and RADIUS to set up wireless security on your ZyAIR Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless stations, access points and the wired network.

  • Page 50: Authentication

    ZyAIR G-1000 Access Point User’s Guide 6.2.2 Authentication Three different methods can be used to authenticate wireless stations to the network: Open System, Shared Key, and Auto. The following figure illustrates the steps involved. Authentication Access Point Wireless Station Open System Authentication...

  • Page 51: Configuring Wep Data Encryption

    ZyAIR G-1000 Access Point User’s Guide When your ZyAIR's authentication method is set to open system, it will only accept open system authentication requests. The same is true for shared key authentication. However, when it is set to auto authentication, the ZyAIR will accept either type of authentication request and the ZyAIR will fall back to use open authentication if the shared key does not match.

  • Page 52: Mac Filter

    ZyAIR G-1000 Access Point User’s Guide Table 6-1 Wireless LABEL DESCRIPTION Select Disable to allow wireless stations to communicate with the access points without Encryption any data encryption. Select 64-bit WEP or 128-bit WEP to enable data encryption. Authentication Select Auto, Open System or Shared Key from the drop-down list box.

  • Page 53: Figure 6-4 Mac Address Filter

    ZyAIR G-1000 Access Point User’s Guide Figure 6-4 MAC Address Filter The following table describes the fields in this screen. Wireless Security...

  • Page 54: Overview

    ZyAIR G-1000 Access Point User’s Guide Table 6-2 MAC Address Filter LABEL DESCRIPTION MAC Address Filter Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC address filter table.

  • Page 55: Eap Authentication Overview

    ZyAIR G-1000 Access Point User’s Guide • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message.

  • Page 56: Dynamic Wep Key Exchange

    ZyAIR G-1000 Access Point User’s Guide RADIUS Server Wireless Station Ethernet Figure 6-5 EAP Authentication The details below provide a general description of how IEEE 802.1x EAP authentication works. For an example list of EAP-MD5 authentication steps, see the IEEE 802.1x appendix.

  • Page 57: Introduction To Local User Database

    ZyAIR G-1000 Access Point User’s Guide Introduction to Local User Database By storing user profiles locally on the ZyAIR, your ZyAIR is able to authenticate wireless users without interacting with a network RADIUS server. However, there is a limit on the number of users you may authenticate in this way.

  • Page 58: Table 6-3 802.1X Authentication

    ZyAIR G-1000 Access Point User’s Guide Table 6-3 802.1x Authentication LABEL DESCRIPTION Wireless Port To control wireless stations access to the wired network, select a control method from Control the drop-down list box. Choose from No Authentication Required, Authentication Required and No Access Allowed.
  • Page 59 ZyAIR G-1000 Access Point User’s Guide Table 6-3 802.1x Authentication LABEL DESCRIPTION Authentication This field is activated only when you select Authentication Required in the Wireless Databases Port Control field. The authentication database contains wireless station login information. The local user database is the built-in database on the ZyAIR.

  • Page 60: Configuring Local User Database

    ZyAIR G-1000 Access Point User’s Guide 6.10 Configuring Local User Database To change your ZyAIR’s local user database, click ADVANCED, WIRELESS and then the Local User Database tab. The screen appears as shown. Figure 6-7 Local User Database 6-12 Wireless Security...

  • Page 61: Configuring Radius

    ZyAIR G-1000 Access Point User’s Guide The following table describes the fields in this screen. Table 6-4 Local User Database LABEL DESCRIPTION Active Select this check box to activate the user profile. User Name Enter the username (up to 31 characters) for this user profile.

  • Page 62: Figure 6-8 Radius

    ZyAIR G-1000 Access Point User’s Guide Figure 6-8 RADIUS The following table describes the fields in this screen. Table 6-5 RADIUS LABEL DESCRIPTION Authentication Server Active Select Yes from the drop-down list box to enable user authentication through an external authentication server.
  • Page 63 ZyAIR G-1000 Access Point User’s Guide Table 6-5 RADIUS LABEL DESCRIPTION Shared Secret Enter a password (up to 31 alphanumeric characters) as the key to be shared between the external authentication server and the ZyAIR. The key must be the same on the external authentication server and your ZyAIR.

  • Page 65: Ip And Logs

    IP and Logs Part III: IP AND LOGS This part provides information and configuration instructions for the IP screen and for the logs.

  • Page 67: Chapter 7 Ip Screen

    ZyAIR G-1000 Access Point User’s Guide Chapter 7 IP Screen This chapter discusses how to configure IP settings on the ZyAIR Factory Ethernet Defaults The Ethernet parameters of the ZyAIR are preset in the factory with the following values: •...

  • Page 68: Configuring Ip Address

    ZyAIR G-1000 Access Point User’s Guide Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space.
  • Page 69 ZyAIR G-1000 Access Point User’s Guide Table 7-2 IP Setup LABEL DESCRIPTION Get automatically Select this option if your ZyAIR is using a dynamically assigned IP address from a DHCP server each time. You must know the IP address assigned to the ZyAIR (by the DHCP server) to access the ZyAIR again.

  • Page 71: Chapter 8 Logs Screens

    ZyAIR G-1000 Access Point User’s Guide Chapter 8 Logs Screens This chapter contains information about configuring general log settings and viewing the ZyAIR’s logs. Refer to the appendix for example log message explanations. Displaying Logs The web configurator allows you to look at all of the ZyAIR’s logs in one location.

  • Page 72: Configuring Log Settings

    ZyAIR G-1000 Access Point User’s Guide Table 8-1 View Log LABEL DESCRIPTION This is the index number of the log entry. Time This field displays the time the log was recorded. Message This field states the reason for the log.

  • Page 73: Figure 8-2 Log Settings

    ZyAIR G-1000 Access Point User’s Guide Figure 8-2 Log Settings The following table describes the fields in this screen. Table 8-2 Log Settings LABEL DESCRIPTION Address Info Logs Screens...
  • Page 74 ZyAIR G-1000 Access Point User’s Guide Table 8-2 Log Settings LABEL DESCRIPTION Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below. If this field is left blank, logs and alert messages will not be sent via e-mail.
  • Page 75 ZyAIR G-1000 Access Point User’s Guide Table 8-2 Log Settings LABEL DESCRIPTION Send Immediate Alert Select the categories of alerts for which you want the ZyAIR to send immediately e- mail alerts. Apply Click Apply to save your customized settings and exit this screen.

  • Page 77: Maintenance

    Maintenance Part IV: MAINTENANCE This part describes the Maintenance screens.

  • Page 79: Chapter 9 Maintenance

    ZyAIR G-1000 Access Point User’s Guide Chapter 9 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. Maintenance Overview The maintenance screens allow you to view system information, upload new firmware, manage configuration and restart your ZyAIR.

  • Page 80: System Statistics

    Table 9-1 System Status LABEL DESCRIPTION ZyNOS Firmware This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL's Version proprietary Network Operating System design. Routing Protocols This shows the routing protocol – BRIDGE for which the ZyAIR is configured.

  • Page 81: Wireless Screen

    ZyAIR G-1000 Access Point User’s Guide Table 9-2 System Status: Show Statistics LABEL DESCRIPTION Status This shows the port speed and duplex setting if you are using Ethernet encapsulation for the Ethernet port. This shows the transmission speed only for wireless port.

  • Page 82: F/W Upload Screen

    ZyAIR G-1000 Access Point User’s Guide Figure 9-3 Association List The following table describes the fields in this screen. Table 9-3 Association List LABEL DESCRIPTION This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station.

  • Page 83: Figure 9-4 Firmware Upload

    ZyAIR G-1000 Access Point User’s Guide Figure 9-4 Firmware Upload The following table describes the fields in this screen. Table 9-4 Firmware Upload LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it.

  • Page 84: Figure 9-5 Firmware Upload In Process

    ZyAIR G-1000 Access Point User’s Guide Figure 9-5 Firmware Upload In Process The device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 9-6 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the System Status screen.

  • Page 85: Configuration Screen

    ZyAIR G-1000 Access Point User’s Guide Figure 9-7 Firmware Upload Error Configuration Screen The web configurator uses TFTP to transfer files. See the Firmware and Configuration File Maintenance chapter for transferring configuration files using FTP/TFTP commands. Click MAINTENANCE and then CONFIGURATION. Information related to backup configuration, restoring configuration and factory defaults appears as shown next.

  • Page 86: Restore Configuration

    ZyAIR G-1000 Access Point User’s Guide 9.5.2 Restore Configuration Restore configuration replaces your ZyAIR's current configuration with a previously saved configuration. Restore files (usually) have a .ROM extension, e.g., "zyair.rom". The system reboots automatically after the file transfer is complete and uses the configured values in the file.

  • Page 87: Figure 9-10 Configuration Upload Successful

    ZyAIR G-1000 Access Point User’s Guide Figure 9-10 Configuration Upload Successful The device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 9-11 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.2).

  • Page 88: Back To Factory Defaults

    ZyAIR G-1000 Access Point User’s Guide Figure 9-12 Configuration Upload Error 9.5.3 Back to Factory Defaults Pressing the Reset button in this section clears all user-entered configuration information and returns the ZyAIR to its factory defaults as shown on the screen.

  • Page 89: Figure 9-14 Reset Warning Message

    ZyAIR G-1000 Access Point User’s Guide Figure 9-14 Reset Warning Message You can also press the RESET button on the rear panel to reset the factory defaults of your ZyAIR. Refer to the chapter on top panel connections for more information on the RESET button.

  • Page 91: Smt Configuration

    SMT Configuration Part V: SMT CONFIGURATION This part contains SMT (System Management Terminal) configuration and background information for features only configurable by SMT. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT.

  • Page 93: Chapter 10 Introducing The Smt

    ZyAIR G-1000 Access Point User’s Guide Chapter 10 Introducing the SMT This chapter describes how to access the SMT and provides an overview of its menus 10.1 Connect to your ZyAIR Using Telnet The following procedure details how to telnet into your ZyAIR.

  • Page 94: Zyair Smt Menu Overview Example

    ZyAIR G-1000 Access Point User’s Guide Step 2. Enter 1 to display Menu 23.1 – System Security – Change Password as shown next. Step 3. Type your existing system password in the Old Password field, and press [ENTER]. Menu 23.1 – System Security – Change Password...

  • Page 95: Figure 10-3 Smt Menu Overview

    ZyAIR G-1000 Access Point User’s Guide Figure 10-3 SMT Menu Overview Introducing the SMT 10-3...

  • Page 96: Navigating The Smt Interface

    ZyAIR G-1000 Access Point User’s Guide 10.5 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your ZyAIR. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below.

  • Page 97: System Management Terminal Interface Summary

    ZyAIR G-1000 Access Point User’s Guide Copyright (c) 1994 - 2003 ZyXEL Communications Corp. ZyAIR G-1000 Main Menu Getting Started Advanced Management 1. General Setup 22. SNMP Configuration 3. LAN Setup 23. System Security 24. System Maintenance Advanced Applications 14. Dial-in User Setup 99.

  • Page 99: Chapter 11 General Setup

    ZyAIR G-1000 Access Point User’s Guide Chapter 11 General Setup The chapter shows you the information on general setup. 11.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. It is recommended you type your computer's "Computer name".

  • Page 100: Table 11-1 Menu 1 General Setup

    ZyAIR G-1000 Access Point User’s Guide Table 11-1 Menu 1 General Setup FIELD DESCRIPTION EXAMPLE System Name Choose a descriptive name for identification purposes. This name can G-1000 be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-”...

  • Page 101: Chapter 12 Lan Setup

    ZyAIR G-1000 Access Point User’s Guide Chapter 12 LAN Setup This chapter shows you how to configure the LAN on your ZyAIR. 12.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup. From the main menu, enter 3 to display menu 3.

  • Page 102: Wireless Lan Setup

    ZyAIR G-1000 Access Point User’s Guide Follow the instructions in the following table on how to configure the DHCP fields. Table 12-1 Menu 3.2 TCP/IP Setup FIELD DESCRIPTION EXAMPLE IP Address Press [SPACE BAR] and then [ENTER] to select Dynamic to have the Assignment ZyAIR obtain an IP address from a DHCP server.

  • Page 103: Figure 12-3 Menu 3.5 Wireless Lan Setup

    ZyAIR G-1000 Access Point User’s Guide Menu 3.5 - Wireless LAN Setup ESSID= Wireless Hide ESSID= No Channel ID= CH06 2437MHz RTS Threshold= 2432 Frag. Threshold= 2432 WEP Encryption= Disable Default Key= N/A Key1= N/A Key2= N/A Key3= N/A Key4= N/A Authen.
  • Page 104 ZyAIR G-1000 Access Point User’s Guide Table 12-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE Select Disable to allow wireless stations to communicate with the access Disable points without any data encryption. Encryption Select 64-bit WEP or 128-bit WEP to enable data encryption.

  • Page 105: Configuring Mac Address Filtering

    ZyAIR G-1000 Access Point User’s Guide 12.3.1 Configuring MAC Address Filtering Your ZyAIR checks the MAC address of the wireless station device against a list of allowed or denied MAC addresses. However, intruders could fake allowed MAC addresses so MAC-based authentication is less secure than EAP authentication.

  • Page 106: Configuring Roaming

    ZyAIR G-1000 Access Point User’s Guide Menu 3.5.1 - WLAN MAC Address Filter Active= No Filter Action= Allowed Association ------------------------------------------------------------------------------ 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00...

  • Page 107: Figure 12-6 Menu 3.5 Wireless Lan Setup

    ZyAIR G-1000 Access Point User’s Guide Step 1. From the main menu, enter 3 to display Menu 3 – LAN Setup. Step 2. Enter 5 to display Menu 3.5 – Wireless LAN Setup. Menu 3.5 - Wireless LAN Setup ESSID= Wireless...
  • Page 108 ZyAIR G-1000 Access Point User’s Guide Table 12-4 Menu 3.5.2 Roaming Configuration FIELD DESCRIPTION Port # Type the port number to communicate roaming information between access points. The port number must be the same on all access points. The default is 16290. Make sure this port is not used by other services.

  • Page 109: Chapter 13 Dial-In User Setup

    ZyAIR G-1000 Access Point User’s Guide Chapter 13 Dial-in User Setup This chapter shows you how to create user accounts on the ZyAIR. 13.1 Dial-in User Setup By storing user profiles locally, your ZyAIR is able to authenticate wireless users without interacting with a network RADIUS server.

  • Page 110: Table 13-1 Menu 14.1- Edit Dial-In User

    ZyAIR G-1000 Access Point User’s Guide Table 13-1 Menu 14.1- Edit Dial-in User FIELD DESCRIPTION User Name Enter a username up to 31 alphanumeric characters long for this user profile. This field is case sensitive. Active Press [SPACE BAR] to select Yes and press [ENTER] to enable the user profile.

  • Page 111: Chapter 14 Snmp Configuration

    ZyAIR G-1000 Access Point User’s Guide Chapter 14 SNMP Configuration This chapter explains SNMP Configuration menu 22. 14.1 SNMP Overview Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP agent functionality, which allows a manager station to manage and monitor the ZyAIR through the network.

  • Page 112: Supported Mibs

    ZyAIR G-1000 Access Point User’s Guide An agent is a management software module that resides in a managed device (the ZyAIR). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions.

  • Page 113: Snmp Traps

    ZyAIR G-1000 Access Point User’s Guide Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 14-2 Menu 22 SNMP Configuration The following table describes the SNMP configuration parameters.

  • Page 114: Table 14-2 Snmp Traps

    ZyAIR G-1000 Access Point User’s Guide Table 14-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION coldStart (defined in RFC-1215) A trap is sent after booting (power on). warmStart (defined in RFC-1215) A trap is sent after booting (software reboot). linkUp (defined in RFC-1215) A trap is sent with the port number.

  • Page 115: Chapter 15 System Security

    ZyAIR G-1000 Access Point User’s Guide Chapter 15 System Security This chapter describes how to configure the system security on the ZyAIR. 15.1 System Security You can configure the system password, an external RADIUS server and 802.1x in this menu.

  • Page 116: Figure 15-3 Menu 23.2 System Security: Radius Server

    ZyAIR G-1000 Access Point User’s Guide Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Address= 10.11.12.13 Port #= 1812 Shared Secret= ? Accounting Server: Active= No Server Address= 10.11.12.13 Port #= 1813 Shared Secret= ? Press ENTER to Confirm or ESC to Cancel: Figure 15-3 Menu 23.2 System Security: RADIUS Server...

  • Page 117: Ieee 802.1X

    ZyAIR G-1000 Access Point User’s Guide Table 15-1 Menu 23.2 System Security: RADIUS Server FIELD DESCRIPTION EXAMPLE Port The default port of the RADIUS server for accounting is 1813. 1813 You need not change this value unless your network administrator instructs you to do so with additional information.

  • Page 118: Figure 15-5 Menu 23.4 System Security : Ieee802.1X

    ZyAIR G-1000 Access Point User’s Guide Menu 23.4 - System Security - IEEE802.1X Wireless Port Control= Authentication Required ReAuthentication Timer (in second)= 1800 Idle Timeout (in second)= 3600 Authentication Databases= RADIUS Only Dynamic WEP Key Exchange= Disable Press ENTER to Confirm or ESC to Cancel: Figure 15-5 Menu 23.4 System Security : IEEE802.1x...
  • Page 119 ZyAIR G-1000 Access Point User’s Guide Table 15-2 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Authentication This field is activated only when you select Authentication Required in the Wireless Port Control field. Databases The authentication database contains wireless station login information. The local user database is the built-in database on the ZyAIR.

  • Page 121: Chapter 16 System Information And Diagnosis

    ZyAIR G-1000 Access Point User’s Guide Chapter 16 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software.

  • Page 122: Figure 16-2 Menu 24.1 System Maintenance: Status

    ZyAIR G-1000 Access Point User’s Guide Menu 24.1 - System Maintenance - Status 03:47:42 Sat. Jan. 01, 2000 Port Status TxPkts RxPkts Cols Tx B/s Rx B/s Time Ethernet 100M/Full 1622 2117 1:57:17 Wireless 1:57:16 Port Ethernet Address IP Address...

  • Page 123: System Information And Console Port Speed

    ZyAIR G-1000 Access Point User’s Guide 16.2 System Information and Console Port Speed To get to the System Information: Step 1. Enter 24 to display Menu 24 – System Maintenance. Step 2. Enter 2 to display Menu 24.2 – System Information and Console Port Speed.

  • Page 124: System Maintenance- Information

    Menu 1 – General Setup. Routing Refers to the routing protocol used. ZyNOS F/W Version Refers to the ZyNOS (ZyXEL Network Operating System) system firmware version. ZyNOS is a registered trademark of ZyXEL Communications Corporation. Country Code Refers to the country code of the firmware.

  • Page 125: Viewing Error Log

    ZyAIR G-1000 Access Point User’s Guide 16.3.1 Viewing Error Log The first place you should look for clues when something goes wrong is the error log. Follow the procedures to view the local error/trace log: Step 1. Type 24 in the main menu to display Menu 24 – System Maintenance.

  • Page 126: Figure 16-8 Menu 24.4 System Maintenance : Diagnostic

    ZyAIR G-1000 Access Point User’s Guide Menu 24.4 - System Maintenance - Diagnostic TCP/IP 1. Ping Host 2. DHCP Release 3. DHCP Renewal System 11. Reboot System Enter Menu Selection Number: Host IP Address= N/A Figure 16-8 Menu 24.4 System Maintenance : Diagnostic Follow the procedure next to get to display this menu: Step 1.

  • Page 127: Chapter 17 Firmware And Configuration File Maintenance

    The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password and TCP/IP Setup, etc. It arrives from ZyXEL with a rom filename extension. Once you have customized the ZyAIR's settings, they can be saved back to your computer under a filename of your choosing.

  • Page 128: Backup Configuration

    ZyAIR G-1000 Access Point User’s Guide Table 17-1 Filename Conventions FILE TYPE INTERNAL EXTERNAL DESCRIPTION NAME NAME Configuration File Rom-0 *.rom This is the configuration filename on the ZyAIR. Uploading the rom-0 file replaces the entire ROM file system, including your ZyAIR configurations, system-related data (including the default password), the error log and the trace log.

  • Page 129: Using The Ftp Command From The Dos Prompt

    ZyAIR G-1000 Access Point User’s Guide 17.2.2 Using the FTP command from the DOS Prompt Step 1. Launch the FTP client on your computer. Step 2. Enter “open” and the IP address of your ZyAIR. Step 3. Press [ENTER] when prompted for a username.

  • Page 130: Backup Configuration Using Tftp

    ZyAIR G-1000 Access Point User’s Guide Table 17-2 General Commands for Third Party FTP Clients COMMAND DESCRIPTION Initial Remote Specify the default remote directory (path). Directory Initial Local Specify the default local directory (path). Directory FTP over WAN will not work if you have disabled the FTP service in menu 24.11.

  • Page 131: Restore Configuration

    ZyAIR G-1000 Access Point User’s Guide where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyAIR IP address, “get” transfers the file source on the ZyAIR (rom-0 name of the configuration file on the ZyAIR) to the file destination on the computer and renames it config.rom.

  • Page 132: Uploading Firmware And Configuration Files

    ZyAIR G-1000 Access Point User’s Guide Menu 24.6 – Restore Configuration To transfer the firmware and the configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your router. Then type "root" and SMT password as requested.

  • Page 133: Firmware Upload

    ZyAIR G-1000 Access Point User’s Guide 17.4.1 Firmware Upload FTP is the preferred method for uploading the firmware and configuration. To use this feature, your computer must have an FTP client. When you telnet into the ZyAIR, you will see the following screens for uploading firmware and the configuration file using FTP.

  • Page 134: Using The Ftp Command From The Dos Prompt Example

    ZyAIR G-1000 Access Point User’s Guide Menu 24.7.2 - System Maintenance - Upload System Configuration File To upload the system configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested.

  • Page 135: Tftp File Upload

    ZyAIR G-1000 Access Point User’s Guide 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 327680 bytes sent in 1.10Seconds 297.89Kbytes/sec.

  • Page 136: Example: Tftp Command

    ZyAIR G-1000 Access Point User’s Guide 17.4.5 Example: TFTP Command The following is an example TFTP command: TFTP [-i] host put firmware.bin ras where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyAIR’s IP address, “put”...

  • Page 137: Chapter 18 System Maintenance And Information

    SMT, while adding some low-level setup and diagnostic functions. Enter the CI from the SMT by selecting menu 24.8. See the included disk or the zyxel.com web site for more detailed information on CI commands. Enter 8 from Menu 24 – System Maintenance. A list of valid commands can be found by typing help or ? at the command prompt.

  • Page 138: Time And Date Setting

    ZyAIR G-1000 Access Point User’s Guide 18.2 Time and Date Setting The ZyAIR keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your ZyAIR. Menu 24.10 allows you to update the time and date settings of your ZyAIR.

  • Page 139: Resetting The Time

    ZyAIR G-1000 Access Point User’s Guide Table 18-1 Menu 24.10 System Maintenance: Time and Date Setting FIELD DESCRIPTION Time Server Enter the IP address or domain name of your time server. Check with your Address ISP/network administrator if you are unsure of this information.

  • Page 141: Chapter 19 Remote Management

    ZyAIR G-1000 Access Point User’s Guide Chapter 19 Remote Management This chapter covers remote management (SMT menu 24.11). 19.1 Telnet You can configure your ZyAIR for remote Telnet access as shown next. Figure 19-1 Telnet Configuration on a TCP/IP Network 19.2 FTP...

  • Page 142: Remote Management Setup

    ZyAIR G-1000 Access Point User’s Guide 19.4.1 Remote Management Setup Remote management setup is for managing Telnet, FTP and Web services. You can customize the service port, access interface and the secured client IP address to enhance security and flexibility.

  • Page 143: Remote Management Limitations

    ZyAIR G-1000 Access Point User’s Guide Table 19-1 Menu 24.11 Remote Management Control FIELD DESCRIPTION EXAMPLE Access Select the access interface (if any) by pressing the [SPACE BAR]. LAN only Choices are: LAN only, WLAN only, All or Disable. Secured Client IP The default 0.0.0.0 allows any client to use this service to remotely...

  • Page 145: Appendices

    Appendices Part VI: APPENDICES This part provides background information about setting up your computer’s IP address, wireless LAN, 802.1x, PPPoE, PPTP and IP subnetting. It also provides information on the command interpreter interface, NetBIOS commands and logs.

  • Page 147: Appendix A Troubleshooting

    ZyAIR G-1000 Access Point User’s Guide Appendix A Troubleshooting This appendix covers potential problems and possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. Please see our included disk for further information...

  • Page 148: Problems With The Password

    ZyAIR G-1000 Access Point User’s Guide Chart A-2 Troubleshooting the Ethernet Interface PROBLEM CORRECTIVE ACTION I cannot ping any If the ETHN LED on the front panel is off, check the Ethernet cable connections computer on the between your ZyAIR and the Ethernet device.

  • Page 149: Problems With The Wlan Interface

    ZyAIR G-1000 Access Point User’s Guide Problems with the WLAN Interface Chart A-5 Troubleshooting the WLAN Interface PROBLEM CORRECTIVE ACTION Cannot access the Make sure the ZyAIR is turned on and the Link LED is off. ZyAIR from the Make sure the wireless adapter on the wireless station is working properly.

  • Page 151: Appendix B Setting Up Your Computer's Ip Address

    ZyAIR G-1000 Access Point User’s Guide Appendix B Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.
  • Page 152 ZyAIR G-1000 Access Point User’s Guide If you need the adapter: In the Network window, click Add. Select Adapter and then click Add. Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: In the Network window, click Add.
  • Page 153 ZyAIR G-1000 Access Point User’s Guide Click the IP Address tab. -If your IP address is dynamic, select Obtain an IP address automatically. -If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields.
  • Page 154 ZyAIR G-1000 Access Point User’s Guide Click the Gateway tab. -If you do not know your gateway’s IP address, remove previously installed gateways. -If you have a gateway IP address, type it in the New gateway field and click Add.
  • Page 155 ZyAIR G-1000 Access Point User’s Guide For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. For Windows XP, click Network Right-click Local Area Connection and Connections. For Windows 2000/NT, click then click Properties. Network and Dial-up Connections.
  • Page 156 ZyAIR G-1000 Access Point User’s Guide Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically.
  • Page 157 ZyAIR G-1000 Access Point User’s Guide -If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: -In the IP Settings tab, in IP addresses, click Add.
  • Page 158 ZyAIR G-1000 Access Point User’s Guide In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es),...
  • Page 159 ZyAIR G-1000 Access Point User’s Guide Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Select Ethernet built-in from the Connect via list. For dynamically assigned settings, select Using DHCP Server from the Configure: list.

  • Page 160: Macintosh Os X

    ZyAIR G-1000 Access Point User’s Guide For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your ZyAIR in the Router address box.
  • Page 161 ZyAIR G-1000 Access Point User’s Guide Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list.

  • Page 163: Benefits Of A Wireless Lan

    ZyAIR G-1000 Access Point User’s Guide Appendix C Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connection.
  • Page 164 ZyAIR G-1000 Access Point User’s Guide Spread Spectrum (DSSS) and Frequency-Hopping Spread Spectrum (FHSS), in the 2.4 to 2.4825 GHz unlicensed ISM (Industrial, Scientific and Medical) band. The third method is infrared technology, using very high frequencies, just below visible light in the electromagnetic spectrum to carry data.

  • Page 165: Infrastructure Wireless Lan Configuration

    ZyAIR G-1000 Access Point User’s Guide Infrastructure Wireless LAN Configuration For infrastructure WLANs, multiple access points (APs) link the WLAN to the wired network and allow users to efficiently share network resources. The access points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood.
  • Page 166 ZyAIR G-1000 Access Point User’s Guide Diagram 2 ESS Provides Campus-Wide Coverage Wireless LAN and IEEE 802.11...

  • Page 167: Appendix D Wireless Lan With Ieee 802.1X

    ZyAIR G-1000 Access Point User’s Guide Appendix D Wireless LAN With IEEE 802.1x As wireless networks become popular for both portable computing and corporate networks, security is now a priority. Security Flaws with IEEE 802.11 Wireless networks based on the original IEEE 802.11 have a poor reputation for safety. The IEEE 802.11b wireless access standard, first published in 1999, was based on the MAC address.

  • Page 168: Radius Server Authentication Sequence

    ZyAIR G-1000 Access Point User’s Guide RADIUS Server Authentication Sequence The following figure depicts a typical wireless network with a remote RADIUS server for user authentication using EAPOL (EAP Over LAN). Client computer access authorized. Client computer access not authorized.

  • Page 169: Appendix E Types Of Eap Authentication

    ZyAIR G-1000 Access Point User’s Guide Appendix E Types of EAP Authentication This appendix discusses the four popular EAP authentication types: EAP-MD5, EAP-TLS, EAP-TTLS and PEAP. The type of authentication you use depends on the RADIUS server or the AP. Consult your network administrator for more information.
  • Page 170 ZyAIR G-1000 Access Point User’s Guide hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5 and EAP- MSCHAPv2, for client authentication. For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, simple user name and password pair is more practical.

  • Page 171: Appendix F Antenna Selection And Positioning Recommendation

    ZyAIR G-1000 Access Point User’s Guide Appendix F Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air.

  • Page 172: Connector Type

    ZyAIR G-1000 Access Point User’s Guide environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points. • Directional antennas concentrate the RF signal in a beam, like a flashlight. The angle of the beam width determines the direction of the coverage pattern;...
  • Page 173 ZyAIR G-1000 Access Point User’s Guide Appendix G IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.

  • Page 174: Subnet Masks

    ZyAIR G-1000 Access Point User’s Guide A class “A” address (24 host bits) can have 2 –2 hosts (approximately 16 million hosts). Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127.
  • Page 175 ZyAIR G-1000 Access Point User’s Guide sequence of ones beginning from the left most bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
  • Page 176 ZyAIR G-1000 Access Point User’s Guide Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The “borrowed” host ID bit can be either “0” or “1” thus giving two subnets;...
  • Page 177 ZyAIR G-1000 Access Point User’s Guide to an actual host for the first subnet is 192.168.1.1 and the highest is 192.168.1.126. Similarly the host ID range for the second subnet is 192.168.1.129 to 192.168.1.254. Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets.
  • Page 178 ZyAIR G-1000 Access Point User’s Guide Chart 14 Subnet 3 NETWORK NUMBER LAST OCTET BIT VALUE Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.191 Highest Host ID: 192.168.1.190 Chart 15 Subnet 4 NETWORK NUMBER...
  • Page 179 ZyAIR G-1000 Access Point User’s Guide The following table is a summary for class “C” subnet planning. Chart 17 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.255.128 (/25) 255.255.255.192 (/26) 255.255.255.224 (/27) 255.255.255.240 (/28)

  • Page 180: Appendix G Ip Subnetting

    ZyAIR G-1000 Access Point User’s Guide Chart 18 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.255.128 (/25) 255.255.255.192 1024 (/26) 255.255.255.224 2048 (/27) 255.255.255.240 4096 (/28) 255.255.255.248 8192 (/29) 255.255.255.252 16384 (/30) 255.255.255.254...

  • Page 181: Appendix H Command Interpreter

    The following describes how to use the command interpreter. Enter 24 in the main menu to bring up the system maintenance menu. Enter 8 to go to Menu 24.8 - Command Interpreter Mode. See the included disk or zyxel.com for more detailed information on these commands. Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable.

  • Page 183: Appendix I Netbios Filter Commands

    ZyAIR G-1000 Access Point User’s Guide Appendix I NetBIOS Filter Commands The following describes the NetBIOS packet filter commands. See the Command Interpreter appendix for information on the command structure. Introduction NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN.

  • Page 184: Netbios Filter Configuration

    ZyAIR G-1000 Access Point User’s Guide Chart 19 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE IPSec This field displays whether NetBIOS packets sent through a VPN Forward Packets connection are blocked or forwarded. Trigger dial This field displays whether NetBIOS packets are allowed to initiate calls.

  • Page 185: Appendix J Brute-Force Password Guessing Protection

    ZyAIR G-1000 Access Point User’s Guide Appendix J Brute-Force Password Guessing Protection The following describes the commands for enabling, disabling and configuring the brute-force password guessing protection mechanism for the password. See the Command Interpreter appendix for information on the command structure.

  • Page 187: Appendix K Log Descriptions

    ZyAIR G-1000 Access Point User’s Guide Appendix K Log Descriptions This appendix describes some general log messages. Not all log messages are available on all models. Chart 20 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the max. This attempt to create a NAT session exceeds the maximum number of NAT session table entries allowed to be created per host.
  • Page 188 ZyAIR G-1000 Access Point User’s Guide Chart 21 System Maintenance Logs LOG MESSAGE DESCRIPTION TELNET Login Fail Someone has failed to log on to the router via telnet. FTP Login Someone has logged on to the router via FTP. Successfully FTP Login Fail Someone has failed to log on to the router via FTP.
  • Page 189 ZyAIR G-1000 Access Point User’s Guide Chart 23 ICMP Notes TYPE CODE DESCRIPTION A gateway may discard internet datagrams if it does not have the buffer space needed to queue the datagrams for output to the next network on the route to the destination network.

  • Page 190: Log Commands

    ZyAIR G-1000 Access Point User’s Guide Chart 24 Sys log LOG MESSAGE DESCRIPTION Mon dd hr:mm:ss hostname This message is sent by the "RAS" when this syslog is generated. The messages and notes are defined in this src="<srcIP:srcPort>" appendix’s other charts.

  • Page 191: Log Command Example

    ZyAIR G-1000 Access Point User’s Guide Use the sys logs clear command to erase all of the ZyAIR’s logs. Log Command Example This example shows how to set the ZyAIR to record the error logs and alerts and then view the results.

  • Page 193: Power Adaptor Specifications

    ZyAIR G-1000 Access Point User’s Guide Appendix L Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adaptor Model AD48-1201200DUY Input Power AC120Volts/60Hz/0.25A Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards UL, CUL (UL 1950, CSA C22.2 No.234-M90) NORTH AMERICAN PLUG STANDARDS...
  • Page 194 ZyAIR G-1000 Access Point User’s Guide JAPAN PLUG STANDARDS AC Power Adaptor Model JOD-48-1124 Input Power AC100Volts/ 50/60Hz/ 27VA Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards T-Mark (Japan Dentori) AUSTRALIA AND NEW ZEALAND PLUG STANDARDS AC Power Adaptor Model...

  • Page 195: Appendix M Index

    ZyAIR G-1000 Access Point User’s Guide Appendix M Index Customer Support ............v Address Assignment..........7-1 Ad-hoc Configuration..........C-2 Default ..............9-10 Alternative Subnet Mask Notation ......G-3 DHCP ..............16-4 Antenna ..............2-3 Diagnostic............. 16-6 Directional ............F-2 Diagnostic Tools........... 16-1 Omni-directional ..........F-1 Direct Sequence Spread Spectrum......C-2...
  • Page 196 ZyAIR G-1000 Access Point User’s Guide Front Panel...............2-1 Management Information Base (MIB) ....14-2 FTP ................19-3 MD5 ................E-1 Restrictions............19-3 Message Digest Algorithm 5......See MD5 FTP File Transfer...........17-7 Mounting Options ........... 2-4 General Setup ..........4-1, 11-1 Network Management..........1-3 Network Topology With RADIUS Server Example D- Hidden Menus............10-4...
  • Page 197 ZyAIR G-1000 Access Point User’s Guide Example ..............5-7 TFTP Requirements ............5-7 And FTP Over WAN}........19-3 RTS Threshold ..........5-3, 12-3 Restrictions............19-3 TFTP File Transfer ..........17-9 Time and Date Setting .......... 18-2 Time Server ............18-2 Time Zone............. 18-3 Server ..............4-5...

Table of Contents