Page 1 User’s Guide NWA50/90/55 Series 802.11a/b/g/n/ac/ax Access Point Default Login Details Version 7.10 Edition 2, 3/2025 Management IP http://DHCP-assigned IP Address http://192.168.1.2 User Name admin Password See Zyxel Device label or 1234 Copyright © 2025 Zyxel and/or its affiliates. All rights reserved.
Page 2: Warnings And Notes
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Page 3: Table Of Contents
Contents Overview Contents Overview Introduction ............................11 AP Management ..........................20 Hardware ............................... 29 Web Configurator ..........................37 Standalone Configuration ........................48 Standalone Configuration ........................49 Dashboard ............................51 Setup Wizard ............................57 Getting Started ............................. 63 Monitor ..............................94 Network ............................... 106 Wireless ..............................
Page 4: Table Of Contents
Table of Contents Table of Contents Document Conventions ........................2 Contents Overview ..........................3 Table of Contents ..........................4 Chapter 1 Introduction ............................11 1.1 Overview ............................11 1.2 Zyxel Device Product Feature Comparison ................11 1.3 Zyxel Device Roles .......................... 13 1.3.1 Radio Frequency (RF) Monitor ..................... 17 1.4 Sample Feature Applications ......................
Page 5 Table of Contents 4.3 Navigating the Web Configurator ....................39 4.3.1 Title Bar ........................... 40 4.3.2 Navigation Panel ........................42 4.3.3 Standalone Mode Navigation Panel Menus ..............42 4.3.4 Cloud Managed Mode Navigation Panel Menus ............44 4.3.5 Tables and Lists ........................45 Part I: Standalone Configuration ..............
Page 6 Table of Contents 8.4.2 RADIUS Server Setup ......................74 8.4.3 Set Up Rogue AP Detection ....................75 8.4.4 Set Up a Friendly AP List ......................77 8.4.5 Set Up a MAC Filter List ......................79 8.4.6 Restrict Users’ Access to Specific Parts of Your Network ..........79 8.4.7 Test Your WiFi Access Restrictions ..................
Page 7 Table of Contents 11.1.2 What You Need to Know ....................112 11.2 AP Management ........................113 11.3 Rogue AP ............................. 119 11.3.1 Add/Edit Rogue/Friendly List .................... 122 11.4 DCS ............................... 123 11.5 Technical Reference ........................123 Chapter 12 User..............................125 12.1 Overview ............................. 125 12.1.1 What You Can Do in this Chapter ...................
Page 8 Table of Contents 15.1 Overview ............................. 170 15.1.1 What You Can Do in this Chapter ................... 170 15.1.2 What You Need to Know ....................170 15.1.3 Verifying a Certificate ...................... 172 15.2 My Certificates ..........................173 15.2.1 Add My Certificates ......................174 15.2.2 Edit My Certificates ......................
Page 9 Table of Contents Chapter 18 File Manager ............................210 18.1 Overview ............................. 210 18.1.1 What You Can Do in this Chapter ................... 210 18.1.2 What you Need to Know ....................210 18.2 Configuration File ........................213 18.2.1 Example of Configuration File Download Using FTP ............216 18.3 Firmware Package ........................
Page 10 Table of Contents 23.2 Edit System Status ........................235 23.2.1 Network ..........................235 23.2.2 NCC Discovery ........................236 23.3 Edit Device Information ......................237 Chapter 24 Maintenance............................238 24.1 Overview ............................. 238 24.1.1 What You Can Do in this Chapter ................... 238 24.2 Firmware Package ........................
Page 11: Introduction
H A P T E R Introduction 1.1 Overview This User’s Guide covers the models listed below: • NWA50AX • NWA90AX • NWA55AXE • NWA50AX PRO • NWA90AX PRO The Zyxel Device can be managed in one of the following methods: remote management through Nebula Control Center (NCC) or local management in Standalone Mode.
Page 12 Chapter 1 Introduction Table 1 WiFi 6 Models Comparison Table (continued) FEATURES NWA50AX NWA90AX NWA55AXE Available Security Modes None / Enhanced- None / Enhanced-open None / Enhanced-open open / WEP / WPA2- / WEP / WPA2-MIX / / WEP / WPA2-MIX / MIX-Personal / WPA3- WPA3 -Personal &...
Page 13: Zyxel Device Roles
Chapter 1 Introduction Table 2 WiFi 6 PRO Models Comparison Table (continued) FEATURES NWA50AX PRO NWA90AX PRO Available Security Modes None / Enhanced- None / Enhanced-open open / WEP / WPA2- / WEP / WPA2-MIX / MIX-Personal / WPA3 -Personal & WPA3-Personal Enterprise Number of SSID Profiles...
Page 14: Wireless Distribution System (Wds)
Chapter 1 Introduction • Root AP – A root AP connects to the gateway or switch through a wired Ethernet connection and has wireless repeaters connected to it to extend its range. • WiFi Repeater – A WiFi repeater wirelessly connects to a root AP and extends the network’s wireless range.
Page 15 Chapter 1 Introduction Figure 2 Wireless Distribution System Network Example The Zyxel Device can also serve as a wireless bridge in Repeater mode. A wireless bridge connects two wired networks through a wireless connection. When the Zyxel Device is connected to a root AP, enable wireless bridge to allow traffic through the Ethernet port on the Zyxel Device to a wired network.
Page 16: Access Point (Ap)
Chapter 1 Introduction Figure 3 Wireless Bridge Network Example Access Point (AP) The Zyxel Device can receive connections from WiFi clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing). In AP Mode, the Zyxel Device is connected to a broadband modem with Internet access and provides a WiFi network for users to use their notebooks or computers to wirelessly access the Internet.
Page 17: Radio Frequency (Rf) Monitor
Chapter 1 Introduction repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section 11.2 on page 113 Section 14.2 on page 168 for more details. Unless specified, the term “security settings” refers to the traffic between the WiFi clients and the AP. At the time of writing, repeater security is compatible with the Zyxel Device only.
Page 18: Sample Feature Applications
Chapter 1 Introduction allows the Zyxel Device to be set to work as an RF monitor to discover nearby Access Points. The information it obtains from other APs is used to tag possible rogue APs and friendly APs. The Zyxel Device can still work as an AP while it scans the environment for wireless signals.
Page 19: Dual-Radio
1.4.2 Dual-Radio Some of the Zyxel Device models are equipped with dual WiFi radios. This means you can configure different WiFi networks on the 2.4G and 5G bands to operate simultaneously. Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference.
Page 20: Ap Management
Chapter 2 AP Management H A P T E R AP Management 2.1 Management Mode The Zyxel Device is a unified AP and can be managed by NCC, or work as a standalone device. We recommend you use NCC to manage multiple APs (see the NCC User’s Guide). The following table shows the default IP addresses and firmware upload methods for different management modes.
Page 21: Nebula Control Center
Chapter 2 AP Management Figure 8 Web Configurator in Standalone Mode Chapter 5 on page 49 for detailed information about the standalone Web Configurator screens. 2.1.2 Nebula Control Center In this mode, which is also called cloud managed mode, you can manage and monitor the Zyxel Device through the Zyxel Nebula cloud-based network management system.
Page 22: Switching Management Modes
Chapter 2 AP Management Each Zyxel Device must belong to a site which must be in an organization. You can configure each Zyxel Device on its own or configure a set of Zyxel Devices together in a site. You can also monitor groups of sites in organizations.
Page 23: Zyxel One Network (Zon) Utility
Chapter 2 AP Management NCC-to-Standalone Back up your configurations first, then unregister the Zyxel Device from NCC. Press the Reset button. The Zyxel Device will reset to factory defaults. See Section 4.2 on page 37 to log in to the Web Configurator and select standalone mode.
Page 24: Run The Zon Utility
Chapter 2 AP Management • WXGA (Wide XGA 1280x800) 2.3.2 Run the ZON Utility Double-click the ZON Utility to run it. The first time you run the ZON Utility, you will see if your device and firmware version support the ZON Utility.
Page 25 Chapter 2 AP Management Figure 12 ZON Utility Screen Select a network adapter to which your supported devices are connected. Figure 13 Network Adapter Click the Go button for the ZON Utility to discover all supported devices in your network. Figure 14 Discovery The ZON Utility screen shows the devices discovered.
Page 26 Chapter 2 AP Management Figure 15 ZON Utility Screen Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON Utility icons.
Page 27 Chapter 2 AP Management Table 5 ZON Utility Icons (continued) ICON DESCRIPTION 7 Firmware Upgrade Use this icon to upgrade new firmware to selected device(s) of the same model. Make sure you have downloaded the firmware from the Zyxel website to your computer and unzipped it in advance.
Page 28: Ways To Access The Zyxel Device
Chapter 2 AP Management 2.4 Ways to Access the Zyxel Device You can use the following ways to configure the Zyxel Device. Web Configurator The Web Configurator allows easy Zyxel Device setup and management using an Internet browser. If your Zyxel Device is managed by the NCC, use this only for troubleshooting if you cannot connect to the Internet.
Page 29: Hardware
Chapter 3 Hardware H A P T E R Hardware See the Quick Start Guide for hardware installation and connections. 3.1 Zyxel Device Models With Single LEDs The LEDs of some Zyxel Device models can be controlled by using the suppression feature such that the LEDs stay lit (ON) or OFF after the Zyxel Device is ready.
Page 30 Chapter 3 Hardware Figure 18 NWA55AXE Note: The NWA55AXE does not have LEDs. The following are the LED descriptions for the Zyxel Device. Table 7 Zyxel Device LED COLOR STATUS DESCRIPTION Amber Blinks between amber The Zyxel Device is booting up. and green alternately (300 milliseconds interval).
Page 31: Ports
Chapter 3 Hardware Table 7 Zyxel Device LED (continued) COLOR STATUS DESCRIPTION Amber Blinks between amber The Zyxel Device is managed by the NCC but fails to connect and green alternately 3 with NCC, and is reconnecting with the NCC. Green times and then turns solid green for 3 seconds.
Page 32 Chapter 3 Hardware Figure 19 NWA50AX/NWA90AX/NWA50AX PRO/NWA90AX PRO Figure 20 NWA55AXE Note: The NWA55AXE does not have a reset button. Refer to Section 3.3.1 on page 33 to see how to reset your Zyxel Device to its factory default settings. The following are the items on the ports panels for your Zyxel Device.
Page 33: Ways To Reset A Zyxel Device Without A Reset Button
Chapter 3 Hardware Table 8 Ports and Buttons LABEL DESCRIPTION CONSOLE You can use the console port to manage the Zyxel Device using CLI commands. You will be prompted to enter your user name and password. See the Command Reference Guide for more information about the CLI. When configuring using the console port, you need a computer equipped with communications software configured to the following parameters: •...
Page 34 Chapter 3 Hardware Web Configurator of the Zyxel Device Gateway You can use this method if the Zyxel Device is connected to a Zyxel Switch with a Neighbor Reset function. Log into the Zyxel switch’s Web Configurator. Go to Monitor > Neighbor, and then click the Restore button to reset the Zyxel Device to its factory default settings.
Page 35: Poe
Chapter 3 Hardware 3.4 PoE Power Over Ethernet (PoE) is a technology that allows Ethernet cables to supply power and transmit data simultaneously through a single Ethernet cable. You can use PoE when the Zyxel Device is hard to reach a power outlet or to simplify cabling. The following example shows a Power Sourcing Equipment (PSE) supplying power and transmitting data to the Zyxel Device, along with other Powered Devices (PDs) such as an IP camera and an IP telephone.
Page 36 Chapter 3 Hardware Figure 23 PoE Example Application - PoE Injector To view the Zyxel Device’s supported PoE standards, see Section 1.2 on page 11. Use Ethernet cables that correspond to the PoE standard your Zyxel Device supports (see Table 9 on page 36).
Page 37: Web Configurator
H A P T E R Web Configurator 4.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management through Internet browser. Use a browser that supports HTML5, such Mozilla Firefox, or Google Chrome, Microsoft Edge. The recommended screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow: •...
Page 38 Chapter 4 Web Configurator Use an Ethernet cable to connect your computer to the Zyxel Device. Open your web browser and enter the Zyxel Device’s DHCP-assigned IP address or http://192.168.1.2. If the Zyxel Device and your computer are not connected to a DHCP server, ensure your computer’s IP address is between "192.168.1.3"...
Page 39: Navigating The Web Configurator
Chapter 4 Web Configurator Set up a new password containing 4 to 63 printable characters. Spaces are not allowed. Click Apply. Log in again with the user name (default: “admin”) and the new password. Click Login. The wizard screen appears. Please refer to Section 7.1 on page 77 for wizard setup steps.
Page 40: Title Bar
Chapter 4 Web Configurator Figure 24 The Web Configurator’s Dashboard for Standalone Mode Figure 25 The Web Configurator’s Dashboard for Cloud Managed Mode The Web Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation Panel •...
Page 41: Cli Messages
Chapter 4 Web Configurator The icons provide the following functions. Table 10 Title Bar: Web Configurator Icons LABEL DESCRIPTION Wizard Click this to open the wizard. See Section 7.1 on page 57 for more information. Help Click this to open the help page for the current screen. Community Click this to log into the Zyxel forum to post questions, contribute to a discussion and get feedback on Zyxel Device.
Page 42: Navigation Panel
Chapter 4 Web Configurator Figure 28 CLI Messages Click Clear to remove the currently displayed information. Note: See the Command Reference Guide for information about the commands. 4.3.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure Zyxel Device features. Click the arrow in the middle of the right edge of the navigation panel to hide the navigation panel menus or drag it to resize them.
Page 43: Monitor Menu
Chapter 4 Web Configurator Monitor Menu The monitor menu screens display status and statistics information. Table 11 Monitor Menu Screens Summary FOLDER OR LINK FUNCTION Network Status Network Display general LAN interface information and packet statistics. Status Wireless AP Information Radio List Display information about the radios of the connected APs.
Page 44: Maintenance Menu
Chapter 4 Web Configurator Table 12 Configuration Menu Screens Summary (continued) FOLDER OR LINK FUNCTION Configure FTP server settings. Log & Report Log Setting Log Setting Configure the system log and remote syslog servers. Maintenance Menu Use the maintenance menu screens to manage configuration and firmware files, run diagnostics, and reboot the Zyxel Device.
Page 45: Tables And Lists
Chapter 4 Web Configurator Table 14 Maintenance Menu Screens Summary (continued) FOLDER OR LINK FUNCTION Diagnostics Diagnostics Collect diagnostic information. Remote Capture Capture network traffic going through the Zyxel Device and output the captured packets to an analyzer. Reboot Reboot Restart the Zyxel Device.
Page 46 Chapter 4 Web Configurator Select a column heading cell’s right border and drag to re-size the column. Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time.
Page 47 Chapter 4 Web Configurator Figure 30 Common Table Icons Here are descriptions for the most common table icons. Table 15 Common Table Icons LABEL DESCRIPTION Click this to create a new entry. For features where the entry’s position in the numbered list is important (features where the Zyxel Device applies the table’s entries in order like the firewall for example), you can select an entry and click Add to create a new entry after the selected entry.
Page 48: Standalone Configuration
Standalone Configuration...
Page 49: Standalone Configuration
H A P T E R Standalone Configuration 5.1 Overview The Zyxel Device is in standalone mode by default. Use the Web Configurator to manage and configure the Zyxel Device directly. As shown in the following figure, WiFi clients can connect to the Zyxel Device (A) to access network resources.
Page 50 Chapter 5 Standalone Configuration Table 16 Starting and Stopping the Zyxel Device (continued) METHOD DESCRIPTION Using the RESET button If you press the RESET button on the back of the Zyxel Device, the Zyxel Device sets the configuration to its default values and then reboots. See Section 25.6 on page 258 more information.
Page 51: Dashboard
H A P T E R Dashboard 6.1 Overview This screen displays general device information, system status, system resource usage, and interface status in widgets that you can rearrange to suit your needs. You can also collapse, refresh, and close individual widgets.
Page 52 Chapter 6 Dashboard Table 17 Dashboard (continued) LABEL DESCRIPTION Model Name This field displays the model name of this Zyxel Device. Serial Number This field displays the serial number of this Zyxel Device. MAC Address This field displays the MAC addresses used by the Zyxel Device. Each physical port or WiFi Range radio has one MAC address.
Page 53 Chapter 6 Dashboard Table 17 Dashboard (continued) LABEL DESCRIPTION Current Login This field displays the user name used to log in to the current session, the amount of User reauthentication time remaining, and the amount of lease time remaining. Boot Status This field displays details about the Zyxel Device’s startup state.
Page 54 Chapter 6 Dashboard Table 17 Dashboard (continued) LABEL DESCRIPTION Cloud Control Status This field displays only in cloud managed mode: • The Zyxel Device Internet connection status. • The connection status between the Zyxel Device and NCC. • The Zyxel Device registration status on NCC. Mouse over the circles to display detailed information.
Page 55: Cpu Usage
Chapter 6 Dashboard Table 17 Dashboard (continued) LABEL DESCRIPTION OP Mode This indicates the radio’s operating mode. Operating modes are AP (MBSSID), Root AP or Repeater. Channel This indicates the channel number the radio is using. Station This displays the number of WiFi clients connected to the Zyxel Device. AP Information This shows a summary of connected wireless Access Points (APs).
Page 56 Chapter 6 Dashboard Figure 33 Dashboard > Memory Usage The following table describes the labels in this screen. Table 19 Dashboard > Memory Usage LABEL DESCRIPTION The y-axis represents the percentage of RAM usage. Time The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated.
Page 57: Setup Wizard
H A P T E R Setup Wizard 7.1 Accessing the Wizard When you log into the Web Configurator for the first time or when you reset the Zyxel Device to its default configuration, the wizard screen displays. Note: If you have already configured the wizard screens and want to open it again, click the Wizard icon on the upper right corner of any Web Configurator screen.
Page 58: Step 2 Password And Uplink Connection
Chapter 7 Setup Wizard Figure 34 Wizard: Time Settings Figure 35 Wizard: Time Settings (with Country option) 7.2.2 Step 2 Password and Uplink Connection Use this screen to configure the Zyxel Device’s system password and IP address. Uplink Connection: Select Auto (DHCP) if the Zyxel Device is connected to a router with DHCP server enabled.
Page 59: Step 3 Ssid
Chapter 7 Setup Wizard Figure 36 Wizard: Change Password and Uplink Connection 7.2.3 Step 3 SSID Use this screen to enable, disable or edit an SSID profile. An SSID profile is a configuration template for SSID (Service Set IDentifier). It allows you to configure the SSID settings such as WiFi network name, VLAN ID, frequency band and security.
Page 60: Step 4 Radio
Chapter 7 Setup Wizard • Status: Select Active to apply this SSID profile on all the radios. Select Inactive to create the SSID profile without applying this SSID on any radio. • VLAN ID: Enter a VLAN ID for the Zyxel Device to use to tag traffic originating from this SSID. •...
Page 61: Step 5 Summary
Chapter 7 Setup Wizard • Channel Width: Select the channel bandwidth list you want to use on this radio. The Zyxel Device will automatically choose the most suitable channel bandwidth from the bandwidth list you select based on your environment and client device type. See Section 13.2.1 on page 136.
Page 62 Chapter 7 Setup Wizard Figure 40 Wizard: Summary NWA50/90/55 Series User’s Guide...
Page 63: Getting Started
H A P T E R Getting Started 8.1 Getting Started Overview This chapter shows you how to use the Zyxel Device’s various features. • WiFi Network Setup - Choose the operation mode and set up a WiFi network. • Limit Network Bandwidth for Each WiFi Client - Restrict the network bandwidth on a WiFi client.
Page 64: Set Up A Wifi Network In Ap Mode
Chapter 8 Getting Started • Choose Root AP Mode if you want the Zyxel Device to wirelessly extend your WiFi network and also allow WiFi clients to connect to the Zyxel Device. • Choose Repeater Mode if you want the Zyxel Device to wirelessly extend your WiFi network (WDS). 8.2.2 Set Up a WiFi Network in AP Mode This example uses the following parameters to set up a WiFi network.
Page 65 Chapter 8 Getting Started Go to Configuration > Object > AP Profile > SSID > Security List to set the Security Mode by clicking Edit and enter the Pre-Shared Key. Click OK. To see your current WiFi settings and check if the WLAN connection is up, go to Monitor > Wireless > AP Information.
Page 66: Set Up A Wifi Network In Root Ap/Repeater Mode
Chapter 8 Getting Started 8.2.3 Set Up a WiFi Network in Root AP/Repeater Mode To wirelessly extend a WiFi network (WDS), you need two Zyxel Devices, one in Repeater mode and one in Root AP mode. You should already have the root AP set up. Note: The Zyxel Device in Root AP/Repeater mode cannot connect with other company’s APs.
Page 67 Chapter 8 Getting Started For the Guest WiFi, enable Enable Intra-BSS Traffic blocking to prohibit Guest WiFi clients from directly connecting to each other. To separate the Guest WiFi network from the General internal WiFi network, create two VLANs, VLAN 10 and VLAN 20, on your firewall (F), such as ZyWALL. Set the General WiFi network to be in VLAN 10, where your internal network is.
Page 68 Chapter 8 Getting Started Configure the second SSID – Zyxel_Guest using the parameters given above, and then click OK. NWA50/90/55 Series User’s Guide...
Page 69 Chapter 8 Getting Started NWA50/90/55 Series User’s Guide...
Page 70 Chapter 8 Getting Started Go to Configuration > Wireless > AP Management. Click the first SSID Profile of Radio 1 (2.4 GHz). A drop- down list appears. Select the General SSID profile you just configured. Click the second SSID Profile and select the Guest SSID profile. NWA50/90/55 Series User’s Guide...
Page 71: Limit Network Bandwidth For Each Wifi Client
Chapter 8 Getting Started Click the first SSID Profile of Radio 2 (5 GHz). A drop-down list appears. Select the General SSID profile you just configured. Click the second SSID Profile and select the Guest SSID profile. Click Apply on the bottom of the screen. The General and Guest SSID profiles are now applied on Radio 1 and Radio 2.
Page 72: Network Security
Chapter 8 Getting Started Click OK to save your changes. 8.4 Network Security In this section, we show you how to: • Change Security for a WiFi Network • RADIUS Server Setup • Set Up Rogue AP Detection • Set Up a Friendly AP List •...
Page 73 Chapter 8 Getting Started The following screen appears, click the Edit icon next to Security Profile. The following screen appears, select Personal and enter a pre-shared key from 8 to 63 case-sensitive keyboard characters in Pre-Shared Key. Click OK to save your changes. NWA50/90/55 Series User’s Guide...
Page 74: Radius Server Setup
Chapter 8 Getting Started 8.4.2 RADIUS Server Setup Setting up a RADIUS server on your Zyxel Device allows centralized user authentication and authorization, which enhances network security. This option is ideal for enterprise users who need to manage many WiFi clients. Go to the Configuration >...
Page 75: Set Up Rogue Ap Detection
Chapter 8 Getting Started 8.4.3 Set Up Rogue AP Detection This example shows you how to configure the rogue AP detection feature on the Zyxel Device. A rogue AP is a WiFi access point operating in a network’s coverage area that is not a sanctioned part of that network.
Page 76 Chapter 8 Getting Started Figure 43 WiFi Network Example In the figure, the solid circle represents the range of your WiFi network, and the dashed circle represents the extent of the coffee shop’s WiFi network. Note that the two networks overlap. This means that one or more of your APs can detect the AP 1 in the other WiFi network.
Page 77: Set Up A Friendly Ap List
Chapter 8 Getting Started 8.4.4 Set Up a Friendly AP List To find rogue APs, create a list of known friendly APs, then scan for all APs in your coverage area. Check if other APs are known and if not add them to the Rogue AP list. Take the following steps to set up and save a list of access points you want to allow in your network’s coverage area.
Page 78 Chapter 8 Getting Started Save the friendly AP list somewhere it can be accessed by all the other access points on the network. In this example, save it on the network file server. The default filename is “friendly”. Getting Started: Save Friendly AP list 8.4.4.1 Import the Friendly AP List to Other APs Access point A is now configured to do the following.
Page 79: Set Up A Mac Filter List
Chapter 8 Getting Started 8.4.5 Set Up a MAC Filter List A MAC filter list blocks or allows a list of clients based on their MAC addresses, ensuring only authorized clients can access the network. This example shows how to block certain clients based on their MAC addresses.
Page 80 Chapter 8 Getting Started access server 1). Your Zyxel Device is marked ZD. C is a workstation on your wired network, D is your main network switch, and E is the security gateway you use to connect to the Internet. Figure 44 Getting Started: Example Network 8.4.6.2 Your Requirements You want to set up a WiFi network to allow only Alice to access server 1 and the Internet.
Page 81 Chapter 8 Getting Started Repeat steps 1 to step 3 for the SERVER_2 network. Check your settings and test the configuration. To configure layer-2 isolation, you need to know the MAC addresses of the devices on your network, which are as follows. Table 24 Getting Started: Example Network MAC Addresses DEVICE LABEL...
Page 82 Chapter 8 Getting Started The following screen appears. Select l2Isolation03 for Layer-2 Isolation Profile, and select macfilter03 for MAC Filtering Profile. Click OK. Figure 45 SSID Edit Example Click the Layer-2 Isolation List tab. Select the l2Isolation03’s entry and click Edit. The following screen displays.
Page 83: Test Your Wifi Access Restrictions
Chapter 8 Getting Started Enter the MAC address of the device Alice uses to connect to the network in Set 1’s MAC Address field and enter her name in the Description field, as shown in the following figure. Change the Profile Name to “MacFilter_SERVER_1”.
Page 84: Check Settings
Chapter 8 Getting Started 8.4.7.1 Check Settings Take the following steps to check that the Zyxel Device is using the correct SSIDs, MAC filters and layer-2 isolation profiles. Click Configuration > Wireless > AP Management. Check that the correct SSID profiles are enabled, as shown in the following figure.
Page 85: Device Settings
Chapter 8 Getting Started Attempt to access Server 2. You should be able to do so. Attempt to access the Internet. You should be able to do so. Attempt to access Server 1. You should be unable to do so. If you can do so, layer-2 isolation is misconfigured.
Page 86: Change The System Name
Chapter 8 Getting Started Go to the Configuration > Network > IP Setting screen in the Web Configurator. Select the IP type to Static IP and specify a preferred IPv4 address in the IP Address field, for example, “192.168.1.10”. After clicking Apply, you will be disconnected from the Web Configurator due to the IP address change.
Page 87: Change The Login Password
Chapter 8 Getting Started 8.5.3 Change the Login Password Change the Web Configuration login password to help secure your account. Go to the Configuration > Object > User screen. Select an account and click the Edit icon. The Edit User admin screen appears. Enter the new password with 4 to 63 characters. Spaces are not allowed.
Page 88: Upgrade The Firmware
Chapter 8 Getting Started • Restore the Zyxel Device Configuration 8.6.1 Upgrade the Firmware Upload the firmware to the Zyxel Device for feature enhancements. Download the correct firmware from the download library at the Zyxel website. The model code for the Zyxel Device in this example is ACIL.
Page 89: Log And Report
Chapter 8 Getting Started 8.6.2.2 Upload the Zyxel Device Configuration This section shows how to upload a previously saved configuration file from your computer to the Zyxel Device. You might need to do this to recover settings after a reset or to fix problems after configuration changes.
Page 90: Back Up Logs To A Remote Server
Chapter 8 Getting Started Enter a subject line for the alert emails in the Mail Subject field. Choose a subject that is eye-catching and identifies the access point - in this example, “ALERT_Access_Point_A”. Enter the email address to which you want alerts to be sent (myname1@myfirm.com, in this example). Click Apply.
Page 91 Chapter 8 Getting Started The following screen appears. Select Active and enter the IPv4 address or name of the remote server in the Server Address field to send the logs. Then, select a log facility. The log facility allows you to log the messages to different files in the syslog server.
Page 92: Access To The Zyxel Device
Chapter 8 Getting Started Click OK to save your changes. 8.8 Access to the Zyxel Device This section shows you how to configure WAN access for a specific trusted computer through HTTPS, HTTP or SSH to the Zyxel Device. Remote management determines which interface and web services are allowed to access the Zyxel Device.
Page 93 Chapter 8 Getting Started Note: The HTTPS server listens on port 443 by default. If you change the HTTPS server port to a different number on the Zyxel Device, for example 8443, then you must notify people who need to access the Zyxel Device Web Configurator to use “https://Zyxel Device IP Address:8443”...
Page 94: Monitor
H A P T E R Monitor 9.1 Overview Use the Monitor screens to check status and statistics information. 9.1.1 What You Can Do in this Chapter • The Network Status screen (Section 9.3 on page 95) displays general LAN interface information and packet statistics.
Page 95: Network Status
Chapter 9 Monitor 9.3 Network Status Use this screen to look at general Ethernet interface information and packet statistics. To access this screen, click Monitor > Network Status. Figure 50 Monitor > Network Status The following table describes the labels in this screen. Table 28 Monitor >...
Page 96: Port Statistics Graph
Chapter 9 Monitor Table 28 Monitor > Network Status (continued) LABEL DESCRIPTION Set Interval Click this to set the Poll Interval the screen uses. Stop Click this to stop the window from updating automatically. You can start it again by setting the Poll Interval and clicking Set Interval.
Page 97: Radio List
Chapter 9 Monitor Figure 51 Monitor > Network Status > Switch to Graphic View The following table describes the labels in this screen. Table 29 Monitor > Network Status > Switch to Graphic View LABEL DESCRIPTION General Settings Refresh Interval Enter how often you want this window to be automatically updated.
Page 98 Chapter 9 Monitor Figure 52 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that supports WDS) Figure 53 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that does not support WDS) The following table describes the labels in this screen. Table 30 Monitor >...
Page 99: Ap Mode Radio Information
Chapter 9 Monitor 9.4.1 AP Mode Radio Information This screen allows you to view a selected radio’s SSID details, wireless traffic statistics and station count for the preceding 24 hours. To access this window, select a radio and click the More Information button in the Radio List screen.
Page 100: Station List
Chapter 9 Monitor The following table describes the labels in this screen. Table 31 Monitor > Wireless > AP Information > Radio List > More Information LABEL DESCRIPTION SSID Detail This list shows information about all the WiFi clients that have connected to the specified radio over the preceding 24 hours.
Page 101: Wds Link Info
Chapter 9 Monitor The following table describes the labels in this screen. Table 32 Monitor > Wireless > Station Info LABEL DESCRIPTION This is the station’s index number in this list. IP Address This is the station’s IP address. Band This is the frequency band to which the station is connected.
Page 102: Detected Device
Chapter 9 Monitor The following table describes the labels in this screen. Table 33 Monitor > Wireless > WDS Link Info LABEL DESCRIPTION WDS Uplink/ Uplink refers to the WDS link from the repeaters to the root AP. Downlink Info Downlink refers to the WDS link from the root AP to the repeaters.
Page 103 Chapter 9 Monitor Figure 57 Monitor > Wireless > Detected Device The following table describes the labels in this screen. Table 34 Monitor > Wireless > Detected Device LABEL DESCRIPTION Discovered APs Rogue AP This shows how many devices are detected as rogue APs. Suspected rogue This shows how many devices are detected as possible rogue APs based on the classification rule(s) in...
Page 104: View Log
Chapter 9 Monitor Table 34 Monitor > Wireless > Detected Device (continued) LABEL DESCRIPTION Last Seen This indicates the last time the device was detected by the Zyxel Device. Refresh Click this to refresh the items displayed on this page. 9.8 View Log Log messages are stored in two separate logs, one for regular log messages and one for debugging messages.
Page 105 Chapter 9 Monitor The following table describes the labels in this screen. Table 35 Monitor > Log > View Log LABEL DESCRIPTION Show Filter / Hide Click this button to show or hide the filter settings. Filter The Priority, Source Address, Destination Address, Source Interface, Destination Interface, Protocol, Keyword, and Search fields are only available if the filter settings are shown.
Page 106: Network
H A P T E R Network 10.1 Overview This chapter describes how you can configure the management IP address and VLAN settings of your Zyxel Device. The Internet Protocol (IP) address identifies a device on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 107 Chapter 10 Network Figure 60 Configuration > Network > IP Setting Each field is described in the following table. Table 36 Configuration > Network > IP Setting LABEL DESCRIPTION IP Address Assignment IP Type Select DHCP to make the interface a DHCP client and automatically get the IP address, subnet mask, gateway and DNS Server IP address from a DHCP server.
Page 108: Vlan
Chapter 10 Network Table 36 Configuration > Network > IP Setting (continued) LABEL DESCRIPTION IPv6 Address/Prefix Enter the IPv6 address and the prefix length for the LAN interface if you want to use a static Length IP address. This field is optional. The prefix length indicates what the left-most part of the IP address is the same for all computers in the network, that is, the network address.
Page 109: Ieee 802.1Q Tag
Chapter 10 Network A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same group(s);...
Page 110 Chapter 10 Network Figure 63 Configuration > Network > VLAN Figure 64 Configuration > Network > VLAN (for models that support Wireless Bridge) Each field is described in the following table. Table 37 Configuration > Network > VLAN LABEL DESCRIPTION VLAN Settings Management Enter a VLAN ID for the Zyxel Device.
Page 111 Chapter 10 Network Table 37 Configuration > Network > VLAN (continued) LABEL DESCRIPTION Wireless Bridge Enter a VLAN ID for the wireless bridge. Duplicate VLAN IDs are not allowed. Vlan ID (1-4094) The VLAN IDs you set on your root AP should be the same as the VLAN IDs you set here. See Section 1.3 on page 13 for more information on wireless bridge.
Page 112: Wireless
H A P T E R Wireless 11.1 Overview This chapter discusses how to configure the WiFi network settings in your Zyxel Device. The following figure provides an example of a WiFi network. Figure 65 Example of a WiFi Network The WiFi network is the area within the dotted line.
Page 113: Dynamic Channel Selection (Dcs)
Chapter 11 Wireless Station / WiFi Client A station or WiFi client is any WiFi-capable device that can connect to an AP using a WiFi signal. Dynamic Channel Selection (DCS) Dynamic Channel Selection (DCS) is a feature that allows an AP to automatically select the radio channel which it broadcasts.
Page 114 Chapter 11 Wireless Figure 66 Configuration > Wireless > AP Management – AP Mode NWA50/90/55 Series User’s Guide...
Page 115 Chapter 11 Wireless Figure 67 Configuration > Wireless > AP Management – Repeater Mode NWA50/90/55 Series User’s Guide...
Page 116 Chapter 11 Wireless Figure 68 Configuration > Wireless > AP Management > Setup Wireless Bridge Vlan ID: Wireless Bridge Vlan Setting Each field is described in the following table. Table 38 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the checkbox to enable the Zyxel Device’s first (default) radio.
Page 117 Chapter 11 Wireless Table 38 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Enable WDS Wireless If you set the Zyxel Device as a root AP, the radio that’s bridging with the Zyxel Device Bridging should be in repeater mode. Be careful to avoid bridge loops.
Page 118 Chapter 11 Wireless Table 38 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Radio 2 Setting Radio 2 Activate This displays if the Zyxel Device has a second radio. Select the checkbox to enable the Zyxel Device’s second radio. Radio 2 OP Mode This displays if the Zyxel Device has a second radio.
Page 119: Rogue Ap
Chapter 11 Wireless Table 38 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Edit Click Edit ( )to open a screen where you can modify the entry’s settings. In some tables you can just click a table entry and edit it directly in the table. For those types of tables small red triangles display for table entries with changes that you have not yet applied.
Page 120: Rogue Ap Detection
Chapter 11 Wireless Figure 69 Rogue AP Example Friendly APs If you have more than one AP in your WiFi network, you should also configure a list of “friendly” APs. Friendly APs are wireless access points that you know are not a threat. It is recommended that you export (save) your list of friendly APs often, especially if you have a network with a large number of access points.
Page 121 Chapter 11 Wireless Figure 70 Configuration > Wireless > Rogue AP Each field is described in the following table. Table 39 Configuration > Wireless > Rogue AP LABEL DESCRIPTION Rogue AP Detection Setting Enable Rogue AP Select this checkbox to detect Rogue APs in the network. Detection Suspected Rogue AP Select the checkboxes (Weak Security (Open, WEP, WPA-PSK), Hidden SSID, SSID...
Page 122: Add/Edit Rogue/Friendly List
Chapter 11 Wireless Table 39 Configuration > Wireless > Rogue AP (continued) LABEL DESCRIPTION This field is a sequential value, and it is not associated with any interface. Role This field indicates whether the selected AP is a rogue-ap or a friendly-ap. To change the AP’s role, click the Edit button.
Page 123: Dcs
Chapter 11 Wireless 11.4 DCS Use this screen to configure dynamic radio channel selection (see Dynamic Channel Selection (DCS) on page 113).Click Configuration > Wireless > DCS to access this screen. Figure 72 Configuration > Wireless > DCS Each field is described in the following table. Table 41 Configuration >...
Page 124 Chapter 11 Wireless Figure 73 An Example Three-Channel Deployment Three channels are situated in such a way as to create almost no interference with one another if used exclusively: 1, 6 and 11. When an AP broadcasts on any of these 3 channels, it should not interfere with neighboring APs as long as they are also limited to same trio.
Page 125: Overview
H A P T E R User 12.1 Overview This chapter describes how to set up user accounts and user settings for the Zyxel Device. 12.1.1 What You Can Do in this Chapter • The User screen (see Section 12.2 on page 126) provides a summary of all user accounts.
Page 126: User Summary
Chapter 12 User 12.2 User Summary The User screen provides a summary of all user accounts. To access this screen click Configuration > Object > User. Figure 76 Configuration > Object > User The following table describes the labels in this screen. Table 43 Configuration >...
Page 127 Chapter 12 User The first character must be alphabetical (A-Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user 'bob' but use 'BOB' when connecting through CIFS or FTP, it will use the account settings used for 'BOB' not ‘bob’.
Page 128: Setting
Chapter 12 User Table 44 Configuration > User > User > Add/Edit a User (continued) LABEL DESCRIPTION Description Enter the description of each user, if any. You can use up to 60 printable ASCII characters. Default descriptions are provided. Authentication This field is not available if the user type is user.
Page 129 Chapter 12 User Figure 78 Configuration > Object > User > Setting The following table describes the labels in this screen. Table 45 Configuration > Object > User > Setting LABEL DESCRIPTION User Default Setting Default Authentication These authentication timeout settings are used by default when you create a new Timeout Settings user account.
Page 130: Edit User Authentication Timeout Settings
Chapter 12 User Table 45 Configuration > Object > User > Setting (continued) LABEL DESCRIPTION Reauthentication Time This is the default reauthentication time in minutes for each type of user account. It defines the number of minutes the user can be logged into the Zyxel Device in one session before having to log in again.
Page 131 Chapter 12 User Figure 79 User > Setting > Edit User Authentication Timeout Settings The following table describes the labels in this screen. Table 46 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User Type This read-only field identifies the type of user account for which you are configuring the default settings.
Page 132: Ap Profile
H A P T E R AP Profile 13.1 Overview This chapter shows you how to configure preset profiles for the Zyxel Device. 13.1.1 What You Can Do in this Chapter • The Radio screen (Section 13.2 on page 135) creates radio configurations that can be used by the APs.
Page 133 Chapter 13 AP Profile Init SSID Init (initial) SSID (Service Set IDentifier) is the default WiFi network name of the Zyxel Device. The name consists of Zyxel-xxxx, where xxxx are the last four characters of the MAC address. You can find the MAC address on the Zyxel Device label.
Page 134 Chapter 13 AP Profile WPA2 WPA2 (IEEE 802.11i) is a WiFi security standard that defines stronger encryption, authentication and key management than WPA. Key differences between WPA2 and WEP are improved data encryption and user authentication. WPA3 WPA3 is a WiFi security standard based on IEEE 802.11i, with security improvements like adopting enhanced PSK (Pre-Shared Key) authentication mechanism.
Page 135: Radio
Chapter 13 AP Profile Enhanced Air Time Utilization WiFi 6 increases transmission performance in high-density environments, such as a campus or a company office that have multiple client devices using: • OFDMA (Orthogonal Frequency-Division Multiple Access) – allows multiple WiFi clients to transmit data simultaneously on a single OFDM symbol by dividing sub-carriers into groups as transmission units called Resource Units (RUs).
Page 136: Add/Edit Radio Profile
Chapter 13 AP Profile The following table describes the labels in this screen. Table 47 Configuration > Object > AP Profile > Radio LABEL DESCRIPTION Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile.
Page 137 Chapter 13 AP Profile Figure 81 Configuration > Object > AP Profile > Radio > Add/Edit The following table describes the labels in this screen. Table 48 Configuration > Object > AP Profile > Radio > Add/Edit LABEL DESCRIPTION Hide / Show Click this to hide or show the Advanced Settings in this window.
Page 138 Chapter 13 AP Profile Table 48 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION 802.11 Mode Select how to let wireless clients connect to the AP. If 802.11 Band is set to 2.4G: • 11b/g: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate with the Zyxel Device.
Page 139 Chapter 13 AP Profile Table 48 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION 2.4 GHz Channel This field is available when you set 802.11 Band to 2.4G and Channel Selection to DCS. Selection Method Select how you want to specify the channels the Zyxel Device switches between for 2.4 GHz operation.
Page 140 Chapter 13 AP Profile Table 48 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION DCS Time Interval This field is available when you set Channel Selection to DCS and select the Time Interval option. Enter a number of minutes. This regulates how often the Zyxel Device surveys the other APs within its broadcast radius.
Page 141 Chapter 13 AP Profile Table 48 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION Beacon Interval When a wirelessly networked device sends a beacon, it includes with it a beacon interval. This specifies the time period before the Zyxel Device sends the beacon again. The interval tells receiving devices on the network how long they can wait in low-power mode before waking up to handle the beacon.
Page 142: Ssid
Chapter 13 AP Profile Table 48 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION Transmission Specify how the Zyxel Device handles wireless multicast traffic. Mode Select Multicast to Unicast to broadcast wireless multicast traffic to all of the WiFi clients as unicast traffic.
Page 143 Chapter 13 AP Profile Figure 82 Configuration > Object > AP Profile > SSID > SSID List (Default) Figure 83 Configuration > Object > AP Profile > SSID > SSID List (After wizard setup) The following table describes the labels in this screen. Table 49 Configuration >...
Page 144: Add/Edit Ssid Profile
Chapter 13 AP Profile 13.3.2 Add/Edit SSID Profile This screen allows you to create a new SSID profile or edit an existing one. To access this screen, click the Add button or select a SSID profile from the list and click the Edit button. Figure 84 Configuration >...
Page 145 Chapter 13 AP Profile Table 50 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION Security Profile Select a security profile from this list to associate with this SSID. If none exist, you can use the Create new Object menu to create one.
Page 146: Security List
Chapter 13 AP Profile Table 50 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION Enable Intra-BSS Select this option to prevent crossover traffic from within the same BSSID on the Zyxel Device. Traffic Blocking Enable U-APSD Select this option to enable Unscheduled Automatic Power Save Delivery (U-APSD), which is...
Page 147: Add/Edit Security Profile
Chapter 13 AP Profile Table 51 Configuration > Object > AP Profile > SSID > Security List (continued) LABEL DESCRIPTION Remove Click this to remove the selected security profile. This button is not available after you configure the Zyxel Device using the wizard. Object Click this to view which other objects are linked to the selected security profile (for example, Reference...
Page 148 Chapter 13 AP Profile The following table describes the labels in this screen. Table 52 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile > Security Mode: none LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name.
Page 149 Chapter 13 AP Profile Table 52 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile > Security Mode: none (continued) LABEL DESCRIPTION NAS IP Address If the RADIUS server requires the Zyxel Device to provide the NAS (Network Access Server) IP address attribute, enter it here.
Page 150 Chapter 13 AP Profile Table 53 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: enhanced-open (continued) LABEL DESCRIPTION Advance Note: Click on the Show Advanced Settings button to show the fields described below. Idle timeout Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued.
Page 151 Chapter 13 AP Profile Figure 88 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep The following table describes the labels in this screen. Table 54 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep LABEL DESCRIPTION...
Page 152 Chapter 13 AP Profile Table 54 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep (continued) LABEL DESCRIPTION Security Mode Select a security mode from the list: none, enhanced-open, wep, wpa2, wpa2-mix or wpa3.
Page 153 Chapter 13 AP Profile Table 54 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep (continued) LABEL DESCRIPTION Accounting Server Enter the port number of the external accounting server. The default port number is 1813. Port You need not change this value unless your network administrator instructs you to do so with additional information.
Page 154 Chapter 13 AP Profile Figure 89 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 The following table describes the labels in this screen. Table 55 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 LABEL DESCRIPTION...
Page 155 Chapter 13 AP Profile Table 55 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 (continued) LABEL DESCRIPTION Security Mode Select a security mode from the list: none, enhanced-open, wep, wpa2, wpa2-mix or wpa3.
Page 156 Chapter 13 AP Profile Table 55 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 (continued) LABEL DESCRIPTION Primary / Secondary Select this to have the Zyxel Device use the specified RADIUS server. Radius Server Activate Radius Server IP Enter the IP address of the RADIUS server to be used for authentication.
Page 157 Chapter 13 AP Profile Figure 90 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix The following table describes the labels in this screen. Table 56 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix LABEL DESCRIPTION...
Page 158 Chapter 13 AP Profile Table 56 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix (continued) LABEL DESCRIPTION Security Mode Select a security mode from the list: none, enhanced-open, wep, wpa2, wpa2-mix or wpa3.
Page 159 Chapter 13 AP Profile Table 56 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix (continued) LABEL DESCRIPTION Accounting Interim This field is available only when you enable user accounting through an external Update authentication server.
Page 160 Chapter 13 AP Profile Figure 91 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 The following table describes the labels in this screen. Table 57 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 LABEL DESCRIPTION...
Page 161 Chapter 13 AP Profile Table 57 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 (continued) LABEL DESCRIPTION Security Mode Select a security mode from the list: none, enhanced-open, wep, wpa2, wpa2-mix or wpa3.
Page 162: Creating A Security Profile
Chapter 13 AP Profile Table 57 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 (continued) LABEL DESCRIPTION Primary / Secondary Select this to have the Zyxel Device use the specified RADIUS server. Radius Server Activate Radius Server IP Enter the IP address of the RADIUS server to be used for authentication.
Page 163: Mac Filter List
Chapter 13 AP Profile Use the parameters given above and keep other configurations at their default values. Click OK. You will then see the Security_Profile1 entry in the summary table. 13.5 MAC Filter List This screen allows you to create and manage security configurations that can be used by your SSIDs. To access this screen click Configuration >...
Page 164: Add/Edit Mac Filter Profile
Chapter 13 AP Profile Note: You can have a maximum of 32 MAC filtering profiles on the Zyxel Device. Figure 92 Configuration > Object > AP Profile > SSID > MAC Filter List The following table describes the labels in this screen. Table 59 Configuration >...
Page 165: Layer-2 Isolation List
Chapter 13 AP Profile Figure 93 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile The following table describes the labels in this screen. Table 60 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile LABEL DESCRIPTION Profile Name...
Page 166 Chapter 13 AP Profile (C) while preventing the client from accessing other computers and servers on the network. The client can communicate with other WiFi clients only if Intra-BSS Traffic blocking is disabled. Note: Not all models support the layer-2 isolation feature. See the feature comparison table in Section 1.2 on page Note: Intra-BSS Traffic Blocking is activated when you enable layer-2 isolation.
Page 167: Add/Edit Layer-2 Isolation Profile
Chapter 13 AP Profile 13.6.1 Add/Edit Layer-2 Isolation Profile This screen allows you to create a new layer-2 isolation profile or edit an existing one. To access this screen, click the Add button or select a layer-2 isolation profile from the list and click the Edit button. Note: You need to know the MAC address of each WiFi client, AP, computer or router that you want to allow to communicate with the Zyxel Device's WiFi clients.
Page 168: Wds Profile
H A P T E R WDS Profile 14.1 Overview This chapter shows you how to configure WDS (Wireless Distribution System) profiles for the Zyxel Device to form a WDS with other APs. 14.1.1 What You Can Do in this Chapter The WDS Profile screen (Section 14.2 on page 168) creates preset WDS configurations that can be used...
Page 169: Add/Edit Wds Profile
Chapter 14 WDS Profile 14.2.1 Add/Edit WDS Profile This screen allows you to create a new WDS profile or edit an existing one. To access this screen, click the Add button or select and existing profile and click the Edit button. Figure 98 Configuration >...
Page 170: Certificates
H A P T E R Certificates 15.1 Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 15.1.1 What You Can Do in this Chapter •...
Page 171 Chapter 15 Certificates Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny’s public key to verify the message. The Zyxel Device uses certificates based on public-key cryptology to authenticate users attempting to establish a connection, not to encrypt the data that you send after establishing a connection. The method used to secure the data that you send through an established connection depends on the type of connection.
Page 172: Verifying A Certificate
Chapter 15 Certificates • Binary PKCS#12: This is a format for transferring public key and private key certificates.The private key in a PKCS #12 file is within a password-encrypted envelope. The file’s password is not connected to your certificate’s public or private passwords. Exporting a PKCS #12 file creates this and you must provide it to decrypt the contents when you import the file into the Zyxel Device.
Page 173: My Certificates
Chapter 15 Certificates 15.2 My Certificates Click Configuration > Object > Certificate > My Certificates to open this screen. This is the Zyxel Device’s summary list of certificates and certification requests. Figure 99 Configuration > Object > Certificate > My Certificates The following table describes the labels in this screen.
Page 174: Add My Certificates
Chapter 15 Certificates Table 65 Configuration > Object > Certificate > My Certificates (continued) LABEL DESCRIPTION Issuer This field displays identifying information about the certificate’s issuing certification authority, such as a common name, organizational unit or department, organization or company and country.
Page 175 Chapter 15 Certificates The following table describes the labels in this screen. Table 66 Configuration > Object > Certificate > My Certificates > Add LABEL DESCRIPTION Name Type a name to identify this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Page 176: Edit My Certificates
Chapter 15 Certificates Table 66 Configuration > Object > Certificate > My Certificates > Add (continued) LABEL DESCRIPTION Click OK to begin certificate or certification request generation. Cancel Click Cancel to quit and return to the My Certificates screen. If you configured the Add My Certificates screen to have the Zyxel Device enroll a certificate and the certificate enrollment is not successful, you see a screen with a Return button that takes you back to the Add My Certificates screen.
Page 177 Chapter 15 Certificates Figure 101 Configuration > Object > Certificate > My Certificates > Edit NWA50/90/55 Series User’s Guide...
Page 178 Chapter 15 Certificates The following table describes the labels in this screen. Table 67 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Page 179: Import Certificates
Chapter 15 Certificates Table 67 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Basic Constraint This field displays general information about the certificate. For example, Subject Type=CA means that this is a certification authority’s certificate and “Path Length Constraint=1” means that there can only be one certification authority in the certificate’s path.
Page 180: Trusted Certificates
Chapter 15 Certificates Figure 102 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. Table 68 Configuration > Object > Certificate > My Certificates > Import LABEL DESCRIPTION File Type in the location of the file you want to upload in this field or click Browse to find it. You cannot import a certificate with the same name as a certificate that is already in the Zyxel Device.
Page 181: Edit Trusted Certificates
Chapter 15 Certificates Figure 103 Configuration > Object > Certificate > Trusted Certificates The following table describes the labels in this screen. Table 69 Configuration > Object > Certificate > Trusted Certificates LABEL DESCRIPTION PKI Storage Space This bar displays the percentage of the Zyxel Device’s PKI storage space that is currently in use. in Use When the storage space is almost full, you should consider deleting expired or unnecessary certificates before adding more certificates.
Page 182 Chapter 15 Certificates certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. Figure 104 Configuration > Object > Certificate > Trusted Certificates > Edit NWA50/90/55 Series User’s Guide...
Page 183 Chapter 15 Certificates The following table describes the labels in this screen. Table 70 Configuration > Object > Certificate > Trusted Certificates > Edit LABEL DESCRIPTION Configuration Name This field displays the identifying name of this certificate. You can change the name. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Page 184: Import Trusted Certificates
Chapter 15 Certificates Table 70 Configuration > Object > Certificate > Trusted Certificates > Edit (continued) LABEL DESCRIPTION Signature Algorithm This field displays the type of algorithm that was used to sign the certificate. Some certification authorities use rsa-pkcs1-sha1 (RSA public-private key encryption algorithm and the SHA1 hash algorithm).
Page 185: Technical Reference
Chapter 15 Certificates Figure 105 Configuration > Object > Certificate > Trusted Certificates > Import The following table describes the labels in this screen. Table 71 Configuration > Object > Certificate > Trusted Certificates > Import LABEL DESCRIPTION File Type in the location of the file you want to upload in this field or click Browse to find it. You cannot import a certificate with the same name as a certificate that is already in the Zyxel Device.
Page 186: System
H A P T E R System 16.1 Overview Use the system screens to configure general Zyxel Device settings. 16.1.1 What You Can Do in this Chapter • The Host Name screen (Section 16.2 on page 186) configures a unique name for the Zyxel Device in your network.
Page 187: Date And Time
Chapter 16 System The following table describes the labels in this screen. Table 72 Configuration > System > Host Name LABEL DESCRIPTION General Settings System Name Choose a descriptive name to identify your Zyxel Device device. This name can be up to 64 alphanumeric characters long.
Page 188 Chapter 16 System Figure 107 Configuration > System > Date/Time The following table describes the labels in this screen. Table 73 Configuration > System > Date/Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the present time of your Zyxel Device. Current Date This field displays the present date of your Zyxel Device.
Page 189: Pre-Defined Ntp Time Servers List
Chapter 16 System Table 73 Configuration > System > Date/Time (continued) LABEL DESCRIPTION Time Server Address Enter the IP address or URL of your time server. Check with your ISP/network administrator if you are unsure of this information. Sync. Now Click this button to have the Zyxel Device get the time and date from a time server (see the Time Server Address field).
Page 190: Time Server Synchronization
Chapter 16 System The Zyxel Device continues to use the pre-defined list of NTP time servers if you do not specify a time server or it cannot synchronize with the time server you specified. 16.3.2 Time Server Synchronization Click the Sync. Now button to get the time and date from the time server you specified in the Time Server Address field.
Page 191: Www Overview
Chapter 16 System 16.4 WWW Overview The following figure shows secure and insecure management of the Zyxel Device coming in from the WAN. HTTPS and SSH access are secure. HTTP and FTP management access are not secure. Figure 109 Secure and Insecure Service Access From the WAN 16.4.1 Service Access Limitations A service cannot be used to access the Zyxel Device when you have disabled that service in the corresponding screen.
Page 192: Configuring Www Service Control
Chapter 16 System authenticate itself to the HTTPS client (the computer which requests the HTTPS connection with the Zyxel Device), whereas the HTTPS client only should authenticate itself when the HTTPS server requires it to do so (select Authenticate Client Certificates in the WWW screen). Authenticate Client Certificates is optional and if selected means the HTTPS client must send the Zyxel Device a certificate.
Page 193: Https Example
Chapter 16 System The following table describes the labels in this screen. Table 75 Configuration > System > WWW > Service Control LABEL DESCRIPTION HTTPS Enable Select the checkbox to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the Zyxel Device Web Configurator using secure HTTPs connections.
Page 194: Mozilla Firefox Warning Messages
Chapter 16 System Figure 112 Security Alert Dialog Box (Google Chrome) Select Advanced > Proceed to 192.168.1.2 (unsafe) to proceed to the Web Configurator login screen. 16.4.5.2 Mozilla Firefox Warning Messages When you attempt to access the Zyxel Device HTTPS server, a Warning screen appears as shown in the following screen.
Page 195: Enrolling And Importing Ssl Client Certificates
Chapter 16 System Figure 113 Security Certificate 1 (Firefox) 16.4.5.3 Avoiding Browser Warning Messages Here are the main reasons your browser displays warnings about the Zyxel Device’s HTTPS server certificate and what you can do to avoid seeing the warnings: •...
Page 196 Chapter 16 System Figure 114 Trusted Certificates The CA sends you a package containing the CA’s trusted certificate(s), your personal certificate(s) and a password to install the personal certificate(s). 16.4.5.5 Installing a Personal Certificate You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment.
Page 197 Chapter 16 System Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA50/90/55 Series User’s Guide...
Page 198 Chapter 16 System Click Finish to complete the wizard and begin the import process. You should see the following screen when the certificate is correctly installed on your computer. 16.4.5.6 Using a Certificate When Accessing the Zyxel Device To access the Zyxel Device through HTTPS: NWA50/90/55 Series User’s Guide...
Page 199: Ssh
Chapter 16 System Enter ‘https://Zyxel Device IP Address/’ in your browser’s web address field. When Authenticate Client Certificates is selected on the Zyxel Device, the following screen asks you to select a personal certificate to send to the Zyxel Device. This screen displays even if you only have a single certificate as in the example.
Page 200: Ssh Implementation On The Zyxel Device
Chapter 16 System Figure 116 How SSH v1 Works Example Host Identification The SSH client (C) sends a connection request to the SSH server (S). The server identifies itself with a host key. The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server.
Page 201: Requirements For Using Ssh
Chapter 16 System 16.5.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the Zyxel Device over SSH. 16.5.4 Configuring SSH Click Configuration > System > SSH to open the following screen. Use this screen to configure your Zyxel Device’s Secure Shell settings.
Page 202: Example 2: Linux
Chapter 16 System Launch the SSH client and specify the connection information (IP address, port number) for the Zyxel Device. Configure the SSH client to accept connection using SSH version 2. A window displays prompting you to store the host key in you computer. Click Yes to continue. Figure 118 SSH Example 1: Store Host Key Enter the password to log in to the Zyxel Device.
Page 203: Ftp
Chapter 16 System 16.6 FTP You can upload and download the Zyxel Device’s firmware and configuration files using FTP. To use this feature, your computer must have an FTP client. See Chapter 18 on page 210 for more information about firmware and configuration files. To change your Zyxel Device’s FTP settings, click Configuration > System >...
Page 204: Log And Report
H A P T E R Log and Report 17.1 Overview Use the system screens to configure daily reporting and log settings. 17.1.1 What You Can Do In this Chapter • The Log Setting screens (Section 17.2 on page 204) specify which logs are emailed, where they are emailed, and how often they are emailed.
Page 205: Edit Remote Server
Chapter 17 Log and Report The following table describes the labels in this screen. Table 78 Configuration > Log & Report > Log Setting LABEL DESCRIPTION Edit Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Page 206 Chapter 17 Log and Report Figure 122 Configuration > Log & Report > Log Setting > Edit Remote Server The following table describes the labels in this screen. Table 79 Configuration > Log & Report > Log Setting > Edit Remote Server LABEL DESCRIPTION Log Settings for Remote Server...
Page 207: Active Log Summary
Chapter 17 Log and Report Table 79 Configuration > Log & Report > Log Setting > Edit Remote Server (continued) LABEL DESCRIPTION Log Category This field displays each category of messages. It is the same value used in the Display and Category fields in the View Log tab.
Page 208 Chapter 17 Log and Report Figure 123 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) NWA50/90/55 Series User’s Guide...
Page 209 Chapter 17 Log and Report The following table describes the fields in this screen. Table 80 Configuration > Log & Report > Log Setting > Active Log Summary LABEL DESCRIPTION Active Log If the Zyxel Device is set to controller mode, the AC section controls logs generated by the Summary controller and the AP section controls logs generated by the managed APs.
Page 210: File Manager
H A P T E R File Manager 18.1 Overview Configuration files define the Zyxel Device’s settings. Shell scripts are files of commands that you can store on the Zyxel Device and run when you need them. You can apply a configuration file or run a shell script without the Zyxel Device restarting.
Page 211: Errors In Configuration Files Or Shell Scripts
Chapter 18 File Manager While configuration files and shell scripts have the same syntax, the Zyxel Device applies configuration files differently than it runs shell scripts. This is explained below. Table 81 Configuration Files and Shell Scripts in the Zyxel Device Configuration Files (.conf) Shell Scripts (.zysh) •...
Page 212 Chapter 18 File Manager Sensitive Data Protection The Zyxel Device by default encrypts local admin and user account passwords for web configurator and CLI. Enable Sensitive Data Protection to have the Zyxel Device use a private key to encrypt local admin and user account passwords for web configurator and CLI.
Page 213: Configuration File
Chapter 18 File Manager 18.2 Configuration File Click Maintenance > File Manager > Configuration File to open this screen. Use the Configuration File screen to store, run, and name configuration files. You can also download configuration files from the Zyxel Device to your computer and upload configuration files from your computer to the Zyxel Device. Once your Zyxel Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making further configuration changes.
Page 214 Chapter 18 File Manager The following table describes the labels in this screen. Table 82 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Configuration Files Rename Use this button to change the label of a configuration file on the Zyxel Device. You can only rename manually saved configuration files.
Page 215 Chapter 18 File Manager Table 82 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Apply Use this button to have the Zyxel Device use a specific configuration file. Click a configuration file’s row to select it and click Apply to have the Zyxel Device use that configuration file.
Page 216: Example Of Configuration File Download Using Ftp
Chapter 18 File Manager Table 82 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Last Modified This column displays the date and time that the individual configuration files were last changed or saved. Sensitive Data Protection Enable Select this to enable Sensitive Data Protection; see Section 18.1 on page 210 for more information.
Page 217: Firmware Package
Chapter 18 File Manager Use an FTP client on your computer to connect to the Zyxel Device. For example, in the Windows command prompt, type ftp 192.168.1.2. Keep the console session connected in order to see when the firmware recovery finishes. Enter your user name when prompted.
Page 218 Chapter 18 File Manager Note: The Web Configurator is the recommended method for uploading firmware. You only need to use the command line interface if you need to recover the firmware. See the CLI Reference Guide for how to determine if you need to recover the firmware and how to recover it.
Page 219 Chapter 18 File Manager Table 83 Maintenance > File Manager > Firmware Package (continued) LABEL DESCRIPTION New firmware This is the new firmware version available for your Zyxel Device. version V6.60 is the firmware trunk version and the number in brackets is the release number. 0 is the first release of this version firmware.
Page 220: Example Of Firmware Upload Using Ftp
Chapter 18 File Manager Note: The Zyxel Device automatically reboots after a successful upload. The Zyxel Device automatically restarts causing a temporary network disconnect to devices connected to its network. In some operating systems, you may see the following icon on your desktop. Figure 132 Network Temporarily Disconnected After five minutes, log in again and check your new firmware version in the Dashboard screen.
Page 221: Shell Script
Chapter 18 File Manager Note: The Zyxel Device will not upgrade the firmware if the firmware file you upload is incompatible with the Zyxel Device. Wait for the file transfer to complete. 10 Enter “quit” to exit the ftp prompt. 18.4 Shell Script Use shell script files to have the Zyxel Device use commands that you specify.
Page 222 Chapter 18 File Manager Table 84 Maintenance > File Manager > Shell Script (continued) LABEL DESCRIPTION Remove Click a shell script file’s row to select it and click Delete to delete the shell script file from the Zyxel Device. A pop-up window asks you to confirm that you want to delete the shell script file. Click OK to delete the shell script file or click Cancel to close the screen without deleting the shell script file.
Page 223: Diagnostics
H A P T E R Diagnostics 19.1 Overview Use the diagnostics screen for troubleshooting. 19.1.1 What You Can Do in this Chapter • The Diagnostics screen (Section 19.2 on page 223) generates a file containing the Zyxel Device’s configuration and diagnostic information if you need to provide it to customer support during troubleshooting.
Page 224: Remote Capture
Chapter 19 Diagnostics Figure 135 Maintenance > Diagnostics: Debug Information Collector 19.3 Remote Capture Use this screen to capture network traffic going through the Zyxel Device and output the captured packets to a packet analyzer (also known as network or protocol analyzer) such as Wireshark. If the Zyxel Device is connected to the Zyxel gateway or ZyWALL, you might need to configure the Zyxel gateway or ZyWALL to allow remote capture on the Zyxel Device.
Page 225: Leds
H A P T E R LEDs 20.1 Overview The LEDs of your Zyxel Device can be controlled such that they stay lit (ON) or OFF after the Zyxel Device is ready. There are two features that control the LEDs of your Zyxel Device – Locator and Suppression. Note: Not all Zyxel Devices have LEDs;...
Page 226: Locator Screen
Chapter 20 LEDs Figure 137 Maintenance > LEDs > Suppression The following table describes fields in the above screen. Table 86 Maintenance > LED > Suppression LABEL DESCRIPTION Suppression On If the Suppression On checkbox is checked, the LEDs of your Zyxel Device will turn off after it’s ready.
Page 227 Chapter 20 LEDs Figure 138 Maintenance > LEDs > Locator The following table describes fields in the above screen. Table 87 Maintenance > LED > Locator LABEL DESCRIPTION Turn On / Turn Off Click Turn On button to activate the locator. The Locator function will show the actual location of the Zyxel Device between several devices in the network.
Page 228: Reboot
H A P T E R Reboot 21.1 Overview Use this screen to restart the Zyxel Device. 21.1.1 What You Need To Know If you made changes in the Web Configurator, they were saved when you click Apply. They do not change when you reboot the Zyxel Device.
Page 229 Chapter 21 Reboot Each field is described in the following table. Table 88 Maintenance > Reboot LABEL DESCRIPTION Maintenance Enable the schedule Select this checkbox to have your Zyxel Device restart at a specific time on selected days of the week. By scheduling a reboot, you can have the Zyxel Device refresh the network connections at a specified time, allowing automatic reconnection with WiFi clients in case of a connection failure.
Page 230: Local Troubleshooting - Cloud Managed Mode
Local Troubleshooting - Cloud Managed Mode...
Page 231: Cloud Managed Mode
H A P T E R Cloud Managed Mode 22.1 Overview The Zyxel Device is managed and provisioned automatically by the NCC (Nebula Control Center) when it is connected to the Internet and has been registered with the NCC. If you cannot access the Zyxel Device from the NCC, you need to access the local GUI screens in cloud managed mode by connecting directly to the LAN port of the Zyxel Device, and check if the Zyxel Device's VLAN setting or IP address has changed.
Page 232 Chapter 22 Cloud Managed Mode • Maintenance > File Manager > Shell Script • Maintenance > Legal and Regulatory > Legal and Regulatory • Maintenance > Diagnostics > Diagnostics • Maintenance > Diagnostics > Remote Capture • Maintenance > Log > View Log •...
Page 233: Dashboard
H A P T E R Dashboard 23.1 Overview This screen displays general AP information, and NCC information in widgets that you can rearrange to suit your needs. You can also edit and refresh individual widgets. These screens also have fewer options than those in standalone Zyxel Devices. The rest of the Zyxel Device’s features must be configured through NCC.
Page 234 Chapter 23 Dashboard Table 89 Dashboard (continued) LABEL DESCRIPTION DNS Server This field display the IP address of the DNS server. 2.4G Channel This field displays the channel number the Zyxel Device is using and its output power in the Information 2.4 GHz spectrum.
Page 235: Edit System Status
Chapter 23 Dashboard 23.2 Edit System Status Use this screen to configure the Zyxel Device’s network setting and allow a proxy to access NCC. 23.2.1 Network Use this screen to configure the VLAN ID, IP address and time server. To access this screen, click Dashboard >...
Page 236: Ncc Discovery
Chapter 23 Dashboard Each field is described in the following table. Table 90 Dashboard > Edit (System Status) > Network LABEL DESCRIPTION Management VLAN VLAN ID Enter a VLAN ID for the Zyxel Device to use to tag traffic originating from this SSID. Make sure your VLAN settings allow the Zyxel Device to connect to the Internet so you could manage it with NCC.
Page 237: Edit Device Information
Chapter 23 Dashboard Figure 143 Dashboard > Edit (System Status) > NCC Discovery 23.3 Edit Device Information Use this screen to configure the Zyxel Device’s system name. To access this screen, click Dashboard > Edit (Device Information). Enter the system name and click OK to save the change. Figure 144 Dashboard >...
Page 238: Maintenance
H A P T E R Maintenance 24.1 Overview When the Zyxel Device is set to work in cloud managed mode, the Maintenance screens allow you to upload firmware, manage shell script files, generate a diagnostic file, view log messages, or reboot the Zyxel Device.
Page 239 Chapter 24 Maintenance Figure 145 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen. Table 91 Maintenance > File Manager > Firmware Package LABEL DESCRIPTION Version Current Version This is the firmware version. Released Date This is the date that the version of the firmware was created.
Page 240: Shell Script
Chapter 24 Maintenance Figure 148 Firmware Download Failed. Download Manually. Note: The Zyxel Device automatically reboots after a successful upload. The Zyxel Device automatically restarts causing a temporary network disconnect to devices connected to its network. In some operating systems, you may see the following icon on your desktop. Figure 149 Network Temporarily Disconnected After five minutes, log in again and check your new firmware version in the Dashboard screen.
Page 241 Chapter 24 Maintenance Go to the Maintenance > File Manager > Shell Script screen. Click Browse... to upload the .zysh file. Click Upload. The uploaded shell script will be shown in the Shell Scripts field. NWA50/90/55 Series User’s Guide...
Page 242 Chapter 24 Maintenance Each field is described in the following table. Table 92 Maintenance > File Manager > Shell Script LABEL DESCRIPTION Shell Scripts Rename Use this button to change the label of a shell script file on the Zyxel Device. You cannot rename a shell script to the name of another shell script in the Zyxel Device.
Page 243: Legal And Regulatory
Chapter 24 Maintenance 24.4 Legal and Regulatory Use this screen to view the information on legal and regulatory. This screen may not display depending on the Zyxel Device model you are using. Figure 151 Maintenance > Legal and Regulatory > Legal and Regulatory 24.5 Diagnostics This screen provides an easy way for you to generate a file containing the Zyxel Device’s configuration and diagnostic information.
Page 244: Remote Capture
Chapter 24 Maintenance Figure 153 Maintenance > Diagnostics > Diagnostics: Debug Information Collector 24.6 Remote Capture Use this screen to capture network traffic going through the Zyxel Device and output the captured packets to a packet analyzer (also known as network or protocol analyzer) such as Wireshark. If the Zyxel Device is connected to the Zyxel gateway or ZyWALL, you might need to configure the Zyxel gateway or ZyWALL to allow remote capture on the Zyxel Device.
Page 245: View Log
Chapter 24 Maintenance 24.7 View Log The NCC periodically gathers log files from the devices being managed by it. Before the NCC pulls logs from the Zyxel Device or when the Zyxel Device is disconnected from the NCC, you can use this screen to view its current log messages.
Page 246: Reboot
Chapter 24 Maintenance Table 94 Maintenance > Log > View Log (continued) LABEL DESCRIPTION Destination This displays when you show the filter. Enter the IP address of the destination of the incoming Address packet when the log message was generated. Do not include the port in this filter. Source Interface This displays when you show the filter.
Page 247 Chapter 24 Maintenance Figure 156 Maintenance > Reboot > Reboot The following table describes the labels in this screen. Table 95 Maintenance > Reboot > Reboot LABEL DESCRIPTION Reboot Click Reboot then click Yes to restart the Zyxel Device immediately. After the Zyxel Device reboots, wait a few minutes until the login screen appears.
Page 248: Appendices And Troubleshooting
Appendices and Troubleshooting...
Page 249: Troubleshooting
H A P T E R Troubleshooting 25.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Zyxel Device Management, Access, and Login •...
Page 250: Zyxel Device Management, Access, And Login
Chapter 25 Troubleshooting Make sure the Ethernet cable connected to the PSE or PoE injector is functional. • Check whether the Ethernet cable is malfunctioning. • Use the correct type of Ethernet cable for the PoE standard supported by the Zyxel Device. See Section 1.2 on page 11 for the Zyxel Device’s supported PoE standards and see Table 9 on page 36...
Page 251 Chapter 25 Troubleshooting • If you changed the IP address, use the new IP address. • If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the Zyxel Device. Check the hardware connections, and make sure the LED is behaving as expected.
Page 252 Chapter 25 Troubleshooting • If the Zyxel Device is in cloud managed mode, use the Nebula Local credentials Password to log into the cloud managed mode local GUI. The Local credentials Password can be found in Site-wide > Configure > Site settings > Device configuration: Local credentials: Password in the NCC portal. Depending on your Zyxel Device’s management mode, make sure you have entered the correct user name and password.
Page 253 Chapter 25 Troubleshooting The Zyxel Device is already registered with NCC, but it is still in standalone mode; it cannot connect to the NCC. Check the Zyxel Device LED and make sure the Zyxel Device is on and ready for use. Check your network’s firewall/security settings.
Page 254 Chapter 25 Troubleshooting When a log reaches the maximum number of log messages (see Section 1.2 on page 11), new log messages automatically overwrite the oldest log messages. The commands in my configuration file or shell script are not working properly. •...
Page 255: Internet Access
Chapter 25 Troubleshooting I only want admins to use HTTPS or SSH to access the Zyxel Device. Section 8.8 on page 92 for more information on how to configure access to the Zyxel Device. 25.4 Internet Access Clients cannot access the Internet through the Zyxel Device. Check the Zyxel Device’s hardware connections, and make sure the LEDs are behaving as expected (refer to Section 3.2 on page...
Page 256: Wifi Network
Chapter 25 Troubleshooting Check the settings for QoS. If it is disabled, activate it. When enabled, raise or lower the priority for some applications. If the problem continues, contact the network administrator or vendor. 25.5 WiFi Network I cannot connect to the Zyxel Device WiFi network. Check the Zyxel Device LED status to make sure the Zyxel Device WiFi is on.
Page 257 Chapter 25 Troubleshooting • Reduce wireless interference that may be caused by other wireless networks or surrounding wireless electronics such as cordless phones. • To ensure the connected WiFi clients receive strong WiFi signal, adjust the minimum signal strength between the Zyxel Device and its WiFi clients by going to the Configuration > Object > AP Profile > Radio screen and selecting Enable Signal Threshold.
Page 258: Resetting The Zyxel Device
Chapter 25 Troubleshooting For My Certificates, you can import a certificate that matches a corresponding certification request that was generated by the Zyxel Device. You can also import a certificate in PKCS#12 format, including the certificate’s public and private keys. You must remove any spaces from the certificate’s filename before you can import the certificate.
Page 259 Chapter 25 Troubleshooting NWA50/90/55 Series User’s Guide...
Page 260: Appendix A Importing A Certificate
P P E N D I X Importing a Certificate When you connect to the Zyxel Device web configurator using HTTPS, a warning page “Your connection is not private” may show up. If you see this warning page, it indicates that your browser has failed to verify the Secure Sockets Layer (SSL) certificate, which opens an encrypted connection.
Page 261 Appendix A Importing a Certificate Open Google Chrome browser. Click the three dots on the upper right corner. Choose Settings In Google Chrome, click Privacy and security > Security > Manage certificates. In Microsoft Edge, click Privacy, search, and services > Manage certificates. NWA50/90/55 Series User’s Guide...
Page 262 Appendix A Importing a Certificate Select the Trusted Root Certification Authorities tab and click Import. Click Next to proceed to the Certificate Import Wizard. Click Browse to select a certificate already saved in your computer and click Next to continue. NWA50/90/55 Series User’s Guide...
Page 263 Appendix A Importing a Certificate Select All Files to find the certificate in your computer. Two options are available for certificate stores. One is Automatically select the certificate store based on the type of certificate. This means the certificate import wizard can identify from the certificate whether it is a CA certificate or a personal certificate, and install it into the appropriate certificate store.
Page 264 Appendix A Importing a Certificate The security warning message shows up and click Yes. Click Finish. NWA50/90/55 Series User’s Guide...
Page 265 Appendix A Importing a Certificate When you click Finish, a pop-up screen informs you about import completion. Remove a Certificate in Google Chrome and Microsoft Edge This section shows you how to remove a public key certificate in Google Chrome and Microsoft Edge on Windows 10 Pro.
Page 266 Appendix A Importing a Certificate In Google Chrome, click Privacy and security > Security > Manage certificates. In Microsoft Edge, click Privacy, search, and services > Manage certificates. NWA50/90/55 Series User’s Guide...
Page 267 Appendix A Importing a Certificate In the Certificates pop-up screen, select the Trusted Root Certification Authorities tab. Select the certificate you want to remove and click Remove. Click Yes when you see the following warning message. Confirm the details displayed in the warning message and click Yes. Import a Certificate to Mozilla Firefox The following example uses Mozilla Firefox on Windows 10 Pro.
Page 268 Appendix A Importing a Certificate Open Firefox browser and click Option bar with three horizontal lines on the upper right corner. Click Settings. Click Privacy & Security. On the screen of Privacy & Security, scroll down to find Certificates and click View Certificates. NWA50/90/55 Series User’s Guide...
Page 269 Appendix A Importing a Certificate After the Certificate Manager displays, select the Authorities tab and click Import. Open the certificate file in your computer and the Downloading Certificate screen shows up. Click Trust this CA to identify websites. Click View to examine the imported CA certificate. After clicking View, the certificate details appear.
Page 270 Appendix A Importing a Certificate The certificate file is installed in Firefox now. To check if the import is successful, click Import to select the same certificate again to see if the alert “This certificate is already installed as a certificate authority” pops out. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox.
Page 271 Appendix A Importing a Certificate Open Firefox browser and click Option bar with three horizontal lines on the upper right corner. Click Settings. Click Privacy & Security. On the screen of Privacy & Security, scroll down to find Certificates and click View Certificates. NWA50/90/55 Series User’s Guide...
Page 272 Appendix A Importing a Certificate In the Certificate Manager, click Authorities and select the certificate you want to remove. Click Delete or Distrust. In the following dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Page 273: Link-Local Address
P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
Page 274: Loopback Address
Appendix B IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
Page 275: Subnet Masking
Appendix B IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
Page 276: Dhcp Relay Agent
Appendix B IPv6 Each DHCP client and server has a unique DHCP Unique IDentifier (DUID), which is used for identification when they are exchanging DHCPv6 messages. The DUID is generated from the MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device.
Page 277 Appendix B IPv6 ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6.
Page 278: Mld Messages
Appendix B IPv6 multicast packets and the IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join. MLD Messages A multicast router or switch periodically sends general queries to MLD hosts to update the multicast forwarding table.
Page 279 Appendix B IPv6 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client.
Page 280 Appendix B IPv6 Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. Click Close to exit the Local Area Connection Status screen. Select Start >...
Page 281: Appendix C Customer Support
• Date that you received your device. • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com Asia China • Zyxel Communications Corporation–China Office •...
Page 282 • https://www.zyxel.com/global/en Philippines • Zyxel Communications Corp. • https://www.zyxel.com/global/en Singapore • Zyxel Communications Corp. • https://www.zyxel.com/global/en Taiwan • Zyxel Communications (Taiwan) Co., Ltd. • https://www.zyxel.com/tw/zh Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th Vietnam • Zyxel Communications Corporation–Vietnam Office • https://www.zyxel.com/vn/vi...
Page 283 Appendix C Customer Support • https://www.zyxel.com/bg/bg Czech Republic • Zyxel Communications Czech s.r.o. • https://www.zyxel.com/cz/cs Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da Finland • Zyxel Communications • https://www.zyxel.com/fi/fi France • Zyxel France • https://www.zyxel.com/fr/fr Germany • Zyxel Deutschland GmbH. • https://www.zyxel.com/de/de Hungary •...
Page 284 • Zyxel Communications A/S • https://www.zyxel.com/se/sv Switzerland • Studerus AG • https://www.zyxel.com/ch/de-ch • https://www.zyxel.com/fr/fr Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en-gb Ukraine • Zyxel Ukraine • https://www.zyxel.com/ua/uk-ua South America Argentina • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Brazil •...
Page 285 Ecuador • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co South America • Zyxel Communications Corp. • https://www.zyxel.com/co/es-co Middle East Israel • Zyxel Communications Corp. • https://il.zyxel.com North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en-us NWA50/90/55 Series User’s Guide...
Page 286: Appendix D Legal Information
P P E N D I X Legal Information Copyright Copyright © 2025 by Zyxel and/or its affiliates The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel and/or its affiliates.
Page 287 Appendix D Legal Information FCC Radiation Exposure Statement (for indoor model - NWA50AX PRO/ NWA90AX PRO) • This device complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. • This transmitter must be at least 20 cm from the user and must not be co-located or operating in conjunction with any other antenna or transmitter.
Page 288 Appendix D Legal Information Innovation, Science and Economic Development Canada RSS-GEN & RSS-247 statement (for outdoor model - NWA55AXE) • This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada’s licence-exempt RSS(s). Operation is subject to the following two conditions: (1) This device may not cause interference; and (2) This device must accept any interference, including interference that may cause undesired operation of the device.
Page 289 Appendix D Legal Information Industry Canada radiation exposure statement (for outdoor model - NWA55AXE) This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 24 cm between the radiator and your body. Déclaration d’exposition aux radiations: (for outdoor model - NWA55AXE) Cet équipement est conforme aux limites d’exposition aux rayonnements ISED établies pour un environnement non contrôlé.Cet équipement doit être installé...
Page 290 Appendix D Legal Information Français Par la présente Zyxel déclare que l'appareil équipements est conforme aux exigences essentielles et aux autres dispositions (French) pertinentes de la directive 2014/53/EU. Hrvatski Zyxel ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 2014/53/EU. (Croatian) Íslenska Hér með...
Page 291: Safety Warnings
Appendix D Legal Information List of national codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Austria Liechtenstein Belgium Lithuania Bulgaria Luxembourg Croatia Malta Cyprus Netherlands Czech Republic Norway Denmark Poland Estonia Portugal Finland Romania France Serbia Germany Slovakia...
Page 292: Disposal And Recycling Information
Appendix D Legal Information Network standby power consumption < 8W (watts), and/or Off mode power consumption < 0.5W (watts), and/or Standby mode power consumption < 0.5W(watts). For wireless setting, please refer to the chapter about wireless settings for more detail. Disposal and Recycling Information The symbol below means that according to local regulations your product and/or its battery shall be disposed of separately from domestic waste.
Page 293: About The Symbols
Appendix D Legal Information • 切勿重摔或撞擊設備，並勿使用不正確的電源變壓器。 • 若接上不正確的電源變壓器會有爆炸的風險。 • 請勿隨意更換產品內的電池。 • 如果更換不正確之電池型式，會有爆炸的風險，請依製造商說明書處理使用過之電池。 • 請將廢電池丟棄在適當的電器或電子設備回收處。 • 請勿將設備解體。 • 請勿阻礙設備的散熱孔，空氣對流不足將會造成設備損害。 • 請使用隨貨提供或指定的連接線 / 電源線 / 電源變壓器，將其連接到合適的供應電壓 ( 如 : 台灣供應電壓 110 伏特 )。 • 假若電源變壓器或電源變壓器的纜線損壞，請從插座拔除，若您還繼續插電使用，會有觸電死亡的風險。 • 請勿試圖修理電源變壓器或電源變壓器的纜線，若有毀損，請直接聯絡您購買的店家，購買⼀個新的電源變壓器。 • 請勿將此設備安裝於室外，此設備僅適合放置於室內。( 僅限於 NWA50AX/NWA90AX/NWA50AX PRO/NWA90AX PRO) •...
Page 294: Open Source Licenses
Appendix D Legal Information Open Source Licenses This product may contain in part some free software distributed under GPL license terms and/or GPL-like licenses. To request the source code covered under these licenses, please go to: https://www.zyxel.com/form/gpl_oss_software_notice.shtml. NWA50/90/55 Series User’s Guide...
Page 295: Index
Index Index Numbers see certificates Certificate Revocation List (CRL) vs OCSP 802.11k 12, 13 certificates 802.11r 12, 13 advantages of 802.11v 12, 13 and CA and FTP and HTTPS and SSH and WWW certification path 171, 178, 183 access expired access privileges factory-default access users...
Page 296 Index backing up downloading downloading with FTP Fast Roaming, see 802.11r editing FCC interference statement how applied file extensions lastgood.conf 213, 215 configuration files managing shell scripts startup-config.conf file manager startup-config-bad.conf syntax Firefox system-default.conf firmware uploading current version 52, 218, 239 uploading with FTP uploading 217, 218, 239...
Page 297 Index status categories 207, 208, 209 debugging interfaces regular as DHCP servers types of interference logout Internet Explorer Web Configurator Internet Protocol version 6, see IPv6 logs IP Address formats gateway IP address settings IP subnet IPv6 addressing EUI-64 global address interface ID MAC address link-local address...
Page 298 Index Online Certificate Status Protocol (OCSP) and users vs CRL limitations timeouts overview 49, 66, 231 Service Set Service Set Identifier see SSID shell scripts downloading 222, 242 pop-up windows editing 221, 240 power off how applied power on managing 221, 240 product registration syntax...
Page 299 Index time VLAN introduction time servers (default) VRPT (Vantage Report) 205, 206 trademarks Transport Layer Security (TLS) troubleshooting 223, 243 Trusted Certificates, see also certificates warm start warranty note upgrading Web Configurator 28, 37 firmware access uploading requirements configuration files supported browsers firmware WEP (Wired Equivalent Privacy)

This manual is also suitable for:

Nwa90 series Nwa55 series Nwa50ax Nwa90ax Nwa55axeNwa50ax pro ... Show all

ZyXEL Communications NWA50 Series User Manual

Quick Links

Troubleshooting

Need help?

Questions and answers

Related Manuals for ZyXEL Communications NWA50 Series

Summary of Contents for ZyXEL Communications NWA50 Series