ZyXEL Communications NWD-211AN User Manual

ZyXEL Communications NWD-211AN User Manual

Dual-band wireless n usb adapter
Hide thumbs Also See for NWD-211AN:

Advertisement

Quick Links

NWD-211AN
Dual-band Wireless N USB Adapter
Firmware Version 1.7.0.0 for OS X
Edition 1, 03/2009
www.zyxel.com
www.zyxel.com
Copyright © 2009
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the NWD-211AN and is the answer not in the manual?

Questions and answers

Summary of Contents for ZyXEL Communications NWD-211AN

  • Page 1 NWD-211AN Dual-band Wireless N USB Adapter Firmware Version 1.7.0.0 for OS X Edition 1, 03/2009 www.zyxel.com www.zyxel.com Copyright © 2009 ZyXEL Communications Corporation...
  • Page 3: About This User's Guide

    About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the NWD-211AN using the ZyXEL Utility. You should have at least a basic knowledge of TCP/IP networking concepts and topology.
  • Page 4: Document Conventions

    Syntax Conventions • The NWD-211AN may be referred to as the “NWD-211AN”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
  • Page 5 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. Table 1 Common Icons NWD-211AN Wireless AP Computer Notebook Printer Telephone Switch Router Internet Cloud Firewall Modem Wireless Signal Server NWD-211AN User’s Guide...
  • Page 6: Safety Warnings

    • ONLY qualified service personnel should service or disassemble this device. • Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s). This product is recyclable. Dispose of it properly. NWD-211AN User’s Guide...
  • Page 7: Table Of Contents

    2.4.1 Push Button Configuration ..................22 2.4.2 PIN Configuration ....................... 22 2.4.3 How WPS Works ......................24 2.4.4 Limitations of WPS ..................... 27 Chapter 3 ZyXEL Utility..........................29 3.1 Overview ..........................29 3.1.1 What You Can Do in This Chapter ................29 NWD-211AN User’s Guide...
  • Page 8 Product Specifications ......................53 Appendix A Setting Up Your IP Address ................59 Appendix B IP Addresses and Subnetting ................69 Appendix C Wireless LANs ....................81 Appendix D Legal Information ....................97 Appendix E Customer Support..................... 103 Index............................109 NWD-211AN User’s Guide...
  • Page 9: Chapter 1 Getting Started

    Getting Started 1.1 Overview The ZyXEL NWD-211AN Dual-band Wireless N USB Adapter adapter brings you a better Internet experience over existing 802.11n networks. With data rates of up to 300 Mbps, you can enjoy a breathtaking high-speed connection at home or in the office.
  • Page 10: Features

    IEEE 802.11a/b/g wireless networks. The NWD-211AN is WPS (Wi-Fi Protected Setup) compliant. WPS allows you to easily connect to another WPS-enabled device. The NWD-211AN is a USB adapter which connects to an empty USB port on your computer. Figure 1 The NWD-211AN The following table describes the NWD-211AN.
  • Page 11: Hardware Installation

    USB port on the computer. The NWD-211AN’s LED (light) turns on if it is properly inserted. Note: Never bend, twist or force the NWD-211AN into the port. If there is not enough space to attach the NWD-211AN, use the included USB cable.
  • Page 12: Installing The Zyxel Utility

    Chapter 1 Getting Started 1.4.2 Installing the ZyXEL Utility To install the ZyXEL Utility: Make sure the NWD-211AN is disconnected from your computer before you begin the installation process. Open the ZyXEL_USB.dmg file on the included disc. Inside the ZyXEL_USB.dmg, open the folder for your version of Mac OS X. For example, if you are using 10.5 then open the USBWireless-10.5 folder.
  • Page 13 Applications folder and a link to it is created in your System Preferences > Accounts > [Admin Account] > Login Items. This is a monitoring application that detects the NWD-211AN whenever you connect it to your computer and which then automatically opens the ZyXEL Utility.
  • Page 14 10.5, then you want to open the USBWireless-10.5 folder.. Double-click the USBWireless-Leopard-Uninstall.pkg to run the installation program and follow the on-screen instructions. After uninstalling the ZyXEL Utility and device driver, you must restart your computer. NWD-211AN User’s Guide...
  • Page 15: Device Applications

    Hoc mode and connect to a peer computer (another wireless device in Ad-Hoc mode). Infrastructure To connect to a network via an access point (AP), set the NWD-211AN network type to Infrastructure. Through the AP, you can access the Internet or the wired network behind it.
  • Page 16 To set up a small independent wireless workgroup without an AP, use Ad-Hoc. Ad-Hoc does not require an AP or a wired network. Two or more wireless clients communicate directly with each other. Note: Wi-Fi Protected Setup (WPS) is not available in ad-hoc mode. Figure 3 Application: Ad-Hoc NWD-211AN User’s Guide...
  • Page 17: Chapter 2 Wireless Lans

    Authentication is the process of confirming a client’s or user’s digital identity when they connect to a network. Turning off authentication means disabling all security protocols and opening your network to anyone with the means to connect to it. NWD-211AN User’s Guide...
  • Page 18: Before You Begin

    (AP) to interact with other devices (such as the printer) or with the Internet Every wireless network must follow these basic guidelines. • Every device in the same wireless network must use the same SSID. The SSID is the name of the wireless network. It stands for Service Set IDentity. NWD-211AN User’s Guide...
  • Page 19: Wireless Lan Security

    Note: You can use only WEP encryption if you set the NWD-211AN to Ad-hoc mode. See the appendices for more detailed information about wireless security.
  • Page 20 WEP keys in the other WLAN adapter(s). • Enter the WEP keys manually. Your NWD-211AN allows you to configure up to four 64-bit or 128-bit WEP keys. Only one key is used as the default key at any one time.
  • Page 21: Wifi Protected Setup

    WEP is less secure than WPA or WPA2. 2.4 WiFi Protected Setup Your NWD-211AN supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
  • Page 22: Push Button Configuration

    WPS in range of each other. However, you need to log into the configuration interfaces of both devices to use the PIN method. NWD-211AN User’s Guide...
  • Page 23 On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. NWD-211AN User’s Guide...
  • Page 24: How Wps Works

    Authentication Protocol) tunnel and sends the network name (SSID) and the WPA- PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2- PSK is used depends on the standards supported by the devices. If the registrar is NWD-211AN User’s Guide...
  • Page 25 WPS, it becomes “configured”. A configured wireless client can still act as enrollee or registrar in subsequent WPS connections, but a configured access point can no longer act as enrollee. It will be the registrar in all NWD-211AN User’s Guide...
  • Page 26 In this case, AP1 must be the registrar, since it is configured (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 8 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 NWD-211AN User’s Guide...
  • Page 27: Limitations Of Wps

    For instance, if you have two enrollees and one registrar you must set up the first enrollee (by pressing the WPS button on the registrar and the first enrollee, for example), then check that it successfully enrolled, then set up the second device in the same way. NWD-211AN User’s Guide...
  • Page 28 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. NWD-211AN User’s Guide...
  • Page 29: Chapter 3 Zyxel Utility

    • The Statistics screen (Section 3.8 on page 39) lets you view network traffic statistics between the NWD-211AN and the AP or peer to which it is connected. • The Advanced screen (Section 3.9 on page 41) lets you configure your NWD- 211AN with advanced hardware options.
  • Page 30: Before You Begin

    DESCRIPTION Profile Use this screen to add, delete, edit or activate a profile with a set of wireless and security settings. Link Status Use this screen to see your current connection status, configuration and data rate statistics. NWD-211AN User’s Guide...
  • Page 31: The Profile Screen

    Statistics Use this screen to view advanced information on wireless network traffic. Advanced Use this screen to configure advanced settings on your NWD-211AN. Use this screen to configure the WPS (Wi-Fi Protected Security) settings on your NWD-211AN. About Use this screen to find the utility and driver version.
  • Page 32 Click this to alter the settings of a selected profile. Delete Click this to remove a selected profile from the list. Activate Click this to select the profile to use. Alternatively, double-click the profile’s name in the list. NWD-211AN User’s Guide...
  • Page 33: The Profile - System Configuration Screen

    Select this to have the NWD-211AN never go into sleep mode. (Constantly Awake Mode) Power Saving Select this to have the NWD-211AN go into sleep mode when it is not Mode transmitting data. Network Type Select Infrastructure to connect to a wireless access point, or select 802.11 Ad Hoc to connect to another wireless-enabled computer.
  • Page 34: Profile - Authentication And Security Screen

    Click this to return to the Profile List screen without saving your changes. 3.5 Profile - Authentication and Security Screen This screen allows you to configure security settings on your NWD-211AN. Figure 13 ZyXEL Utility: Profile - Authentication and Security NWD-211AN User’s Guide...
  • Page 35 Hexadecimal keys use numerals and the letters a~f only, whereas ASCII keys use numerals and all letters. Click this to save your settings and return to the previous screen. Cancel Click this to return to the previous screen without saving your settings. NWD-211AN User’s Guide...
  • Page 36: The Link Status Screen

    Chapter 3 ZyXEL Utility 3.6 The Link Status Screen This screen allows you to view the status of the NWD-211AN’s wireless connection with an AP or peer computer. Figure 14 ZyXEL Utility: Link Status The following table describes the labels in this screen.
  • Page 37: The Site Survey Screen

    This shows the strength of the antenna’s signal. 1 - 2 The signal strength depends mainly on the antenna output power and the distance between your NWD-211AN and the AP or peer computer. Noise Level This indicates the relative interfence from other nearby wireless devices as a percentage.
  • Page 38 This field displays the network type (Infrastructure or Ad Hoc) of the wireless device. RESCAN Click this to update the list. CONNECT Click this to connect to the highlighted wireless network. ADD PROFILE Click this to go to the Add Profile: System Configuration screen. NWD-211AN User’s Guide...
  • Page 39: The Statistics Screen

    This displays the number of frames successfully transmitted by the Transmitted NWD-211AN on the first attempt. Successfully Without Retry Frames This displays the number of frames transmitted by the NWD-211AN Transmitted after a second or subsequent attempt. Successfully After Retry(s) NWD-211AN User’s Guide...
  • Page 40 Chapter 3 ZyXEL Utility Table 10 ZyXEL Utility: Statistics (continued) LABEL DESCRIPTION Frames This displays the number of frames transmitted by the NWD-211AN that Failed to did not receive an acknowledgement response from the other wireless Receive ACK device. After All...
  • Page 41: The Advanced Screen

    The following table describes the labels in this screen. Table 11 ZyXEL Utility: Advanced LABEL DESCRIPTION Wireless Mode Select either 2.4G, 5G, or 2.4 + 5G as the NWD-211AN’s wireless network mode. For more information on the various modes, see Chapter 5 Product Specifications.
  • Page 42: The Wps Screen

    Click Radio On to enable the NWD-211AN’s wireless functions. Apply Click this to save your settings. 3.10 The WPS Screen This screen allows you to configure the NWD-211AN’s Wi-Fi Protected Security (WPS). Figure 18 ZyXEL Utility: WPS The following table describes the labels in this screen.
  • Page 43 PIN Code This field displays a randomly generated 8-digit personal identification code for your NWD-211AN. In Enrollee mode it is not editable, but in Registrar mode it is. Click the Renew button to randomly generate a new PIN code.
  • Page 44: The Information Screen

    Note: For most WPS connections, this button or the PIN button are all you need. Automatically Select this option to have the NWD-211AN automatically scan for and select the AP then select a WPS-compatible AP while making a WPS connection.
  • Page 45: The Profile Details Screen

    English alphanumeric characters. Spaces, underscores and punctuation marks are allowed. BSSID This field indicates your WPS profile’s BSSID. Authentication Select an authentication type to use for creating secure connections, or Type use the default as selected by the NWD-211AN. NWD-211AN User’s Guide...
  • Page 46: The About Screen

    Key Material This is the random string of letters and numbers used as the encryption key seed. An encryption key seed helps your NWD-211AN generate mathmatically random numbers than cannot be second guessed easily by would be malefactors. Click this button to save your settings and return to the previous screen.
  • Page 47 NIC Driver This section displays the version number and release date of the NWD- 211AN’s device driver. MAC Address This field displays the NWD-211AN Media Access Control (MAC) address. EEPROM This field displays the Electrically Erasable Programmable Read-Only Memory (EEPROM) version currently in use by the NWD-211AN.
  • Page 48 Chapter 3 ZyXEL Utility NWD-211AN User’s Guide...
  • Page 49: Chapter 4 Troubleshooting

    • Problems Communicating with Other Computers 4.2 Power, Hardware Connections, and LEDs The NWD-211AN does not turn on. None of the LEDs turn on. Make sure the NWD-211AN is correctly installed. Restart the computer to which the NWD-211AN is attached.
  • Page 50: Accessing The Zyxel Utility

    4.3 Accessing the ZyXEL Utility I cannot access the ZyXEL Utility Make sure the NWD-211AN is properly inserted and the LEDs are on. Install the NWD-211AN on another computer. If the error persists, you may have a hardware problem. In this case, you should contact your vendor.
  • Page 51: Problems Communicating With Other Computers

    • Make sure that the AP and the associated computers are turned on and working properly. • Make sure the NWD-211AN computer and the associated AP use the same SSID. • Change the AP and the associated wireless clients to use another radio channel if interference is high.
  • Page 52 Chapter 4 Troubleshooting NWD-211AN User’s Guide...
  • Page 53: Product Specifications

    H A P T E R Product Specifications Table 16 Product Specifications PHYSICAL AND ENVIRONMENTAL Product Name NWD-211AN Dual-band Wireless N USB Adapter Interface USB 2.0 Standards IEEE 802.11n (draft 2.0), IEEE 802.11g, IEEE 802.11b, and IEEE 802.11a Antenna 2.4 GHz and 5 GHz...
  • Page 54 Dynamically shifts between 54, 48, 36, 24, 18, 12, 9 and 6 Mbps network speed. Operation Frequency 2.412GHz ~ 2.472GHz Operation Channels N. America &Taiwan 2.412GHz ~ 2.462GHz Euro ETSI 2.412GHz ~ 2.472GHz IEEE 802.11n Operation Frequency 2.412GHz ~ 2.472GHz, 5.150GHz ~ 5.850GHz NWD-211AN User’s Guide...
  • Page 55 5.150GHz ~ 5.350GHz 5.470GHz ~ 5.725GHz Euro ETSI HT40 2.422GHz ~ 2.462GHz 5.150GHz ~ 5.350GHz 5.470GHz ~ 5.725GHz Note: 5600~5650MHz is disabled due to Environment Canada weather satellites operating in the band. Networking Mode Infrastructure, Ad-Hoc, Soft AP Support NWD-211AN User’s Guide...
  • Page 56 WEP 64bit, 128bit, WPA, WPA-PSK, WPA2, WPA2-PSK 802.1x (EAP-TLS, EAP-TTLS, EAP-PEAP), WPS. Note: EAP-TTLS is not supported in Windows Vista Wireless QoS WPS (Wi-Fi Protected Push button configuration Setup) Use device's PIN Use AP or Router's PIN NWD-211AN User’s Guide...
  • Page 57 Chapter 5 Product Specifications NWD-211AN User’s Guide...
  • Page 58 Chapter 5 Product Specifications NWD-211AN User’s Guide...
  • Page 59: Appendix A Setting Up Your Ip Address

    • Mac OS 10.3 and 10.4 on page 59 • Mac OS 10.5 on page 64 Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS 10.4 but can also apply to 10.3. Click Apple > System Preferences. NWD-211AN User’s Guide...
  • Page 60 Appendix A Setting Up Your IP Address In the System Preferences window, click the Network icon. When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. NWD-211AN User’s Guide...
  • Page 61 TCP/IP tab. For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet mask field, type your subnet mask. NWD-211AN User’s Guide...
  • Page 62 Appendix A Setting Up Your IP Address • In the Router address field, type the IP address of your NWD-211AN. Click Apply Now and close the window. NWD-211AN User’s Guide...
  • Page 63 Appendix A Setting Up Your IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. NWD-211AN User’s Guide...
  • Page 64 Appendix A Setting Up Your IP Address Mac OS X: 10.5 The screens in this section are from Mac OS 10.5. Click Apple > System Preferences. In System Preferences, click the Network icon. NWD-211AN User’s Guide...
  • Page 65 From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. NWD-211AN User’s Guide...
  • Page 66 Appendix A Setting Up Your IP Address • In the Router field, enter the IP address of your NWD-211AN. Click Apply and close the window. NWD-211AN User’s Guide...
  • Page 67 Appendix A Setting Up Your IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network interface from the Info tab. NWD-211AN User’s Guide...
  • Page 68 Appendix A Setting Up Your IP Address NWD-211AN User’s Guide...
  • Page 69: Appendix B Ip Addresses And Subnetting

    192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. NWD-211AN User’s Guide...
  • Page 70 Table 17 IP Address Network Number and Host ID Example OCTET: OCTET: OCTET: OCTET (192) (168) IP Address (Binary) 11000000 10101000 00000001 00000010 Subnet Mask (Binary) 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 NWD-211AN User’s Guide...
  • Page 71 MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0 24 bits – 2 16777214 16 bits 255.255.0.0 16 bits – 2 65534 24 bits 255.255.255.0 8 bits – 2 29 bits 255.255.255.2 3 bits – 2 NWD-211AN User’s Guide...
  • Page 72 In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. NWD-211AN User’s Guide...
  • Page 73 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. NWD-211AN User’s Guide...
  • Page 74 Similarly, to divide a 24-bit address into four subnets, you need to “borrow” two host ID bits to give four possible combinations (00, 01, 10 and 11). The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. NWD-211AN User’s Guide...
  • Page 75 Lowest Host ID: 192.168.1.129 192.168.1.128 Broadcast Address: Highest Host ID: 192.168.1.190 192.168.1.191 Table 24 Subnet 4 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001 11000000 Subnet Mask (Binary) 11111111.11111111.11111111 11000000 NWD-211AN User’s Guide...
  • Page 76 The following table is a summary for subnet planning on a network with a 24-bit network number. Table 26 24-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.128 (/25) 255.255.255.192 (/26) 255.255.255.224 (/27) 255.255.255.240 (/28) 255.255.255.248 (/29) 255.255.255.252 (/30) 255.255.255.254 (/31) NWD-211AN User’s Guide...
  • Page 77 211AN that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your NWD-211AN will compute the subnet mask automatically based on the IP address NWD-211AN User’s Guide...
  • Page 78 Appendix B IP Addresses and Subnetting that you entered. You don't need to change the subnet mask computed by the NWD-211AN unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet (running only between two branch offices, for example) you can assign any IP addresses to the hosts without problems.
  • Page 79 (WAN), the router’s LAN and WAN addresses must be on different subnets. In the following example, the LAN and WAN are on the same subnet. The LAN computers cannot access the Internet because the router cannot route between networks. Figure 26 Conflicting Computer IP Addresses Example NWD-211AN User’s Guide...
  • Page 80 LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 27 Conflicting Computer and Router IP Addresses Example NWD-211AN User’s Guide...
  • Page 81: Appendix C Wireless Lans

    Independent Basic Service Set (IBSS). The following diagram shows an example of notebook computers using wireless adapters to form an ad-hoc wireless LAN. Figure 28 Peer-to-Peer Communication in an Ad-hoc Network NWD-211AN User’s Guide...
  • Page 82 A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. Figure 29 Basic Service Set NWD-211AN User’s Guide...
  • Page 83 Adjacent channels partially overlap however. To avoid interference due to overlap, your AP should be on a channel at least five channels away from a channel that an NWD-211AN User’s Guide...
  • Page 84 You should only configure RTS/CTS if the possibility of hidden nodes exists on your network and the "cost" of resending large frames is more than the extra network overhead involved in the RTS (Request To Send)/CTS (Clear to Send) handshake. NWD-211AN User’s Guide...
  • Page 85 Use the dynamic setting to automatically use short preamble when all wireless devices on the network support it, otherwise the NWD-211AN uses long preamble. Note: The wireless devices MUST use the same preamble mode in order to communicate.
  • Page 86 Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the NWD-211AN are data encryption, wireless client authentication, restricting access by device MAC address and hiding the NWD-211AN identity.
  • Page 87 Appendix C Wireless LANs Note: You must enable the same wireless security settings on the NWD-211AN and on all wireless clients that you want to associate with it. IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional...
  • Page 88 For EAP-TLS authentication type, you must first have a wired connection to the network and obtain the certificate(s) from a certificate authority (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certificates and guarantees the identity of each certificate owner. NWD-211AN User’s Guide...
  • Page 89 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. NWD-211AN User’s Guide...
  • Page 90 Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i standard. WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption, authentication and key management than WPA. Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication. NWD-211AN User’s Guide...
  • Page 91 By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism (MIC), with TKIP and AES it is more difficult to decrypt data on a Wi-Fi network than WEP and difficult for an intruder to break into the network. NWD-211AN User’s Guide...
  • Page 92 (default is 1812), and the RADIUS shared secret. A WPA(2) application example with an external RADIUS server looks as follows. "A" is the RADIUS server. "DS" is the distribution system. The AP passes the wireless client's authentication request to the RADIUS server. NWD-211AN User’s Guide...
  • Page 93 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. NWD-211AN User’s Guide...
  • Page 94 Enable without Dynamic WEP Open Enable with Dynamic WEP Key Enable without Dynamic WEP Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable NWD-211AN User’s Guide...
  • Page 95 Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. NWD-211AN User’s Guide...
  • Page 96 For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. NWD-211AN User’s Guide...
  • Page 97: Appendix D Legal Information

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimers ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
  • Page 98 • This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. • IEEE 802.11b or 802.11g operation of this product in the U.S.A. is firmware- limited to channels 1 through 11. NWD-211AN User’s Guide...
  • Page 99 This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. End users must follow the specific operating instructions for satisfying RF exposure compliance. 注意 ! 依據 低功率電波輻射性電機管理辦法 第十二條 經型式認證合格之低功率射頻電機,非經許可,公司、商號或使用 者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。 第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信;經發現 有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用。 前項合法通信,指依電信規定作業之無線電信。低功率射頻電機須忍 受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 本機限在不干擾合法電臺與不受被干擾保障條件下於室內使用。 減少電磁波影響,請妥適使用。 NWD-211AN User’s Guide...
  • Page 100 This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. NWD-211AN User’s Guide...
  • Page 101 Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. NWD-211AN User’s Guide...
  • Page 102 Appendix D Legal Information NWD-211AN User’s Guide...
  • Page 103: Appendix E Customer Support

    • Sales E-mail: sales@zyxel.com.tw • Telephone: +886-3-578-3942 • Fax: +886-3-578-2439 • Web: www.zyxel.com, www.europe.zyxel.com • FTP: ftp.zyxel.com, ftp.europe.zyxel.com • Regular Mail: ZyXEL Communications Corp., 6 Innovation Road II, Science Park, Hsinchu 300, Taiwan Costa Rica • Support E-mail: soporte@zyxel.co.cr • Sales E-mail: sales@zyxel.co.cr •...
  • Page 104 Czech Republic • E-mail: info@cz.zyxel.com • Telephone: +420-241-091-350 • Fax: +420-241-091-359 • Web: www.zyxel.cz • Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 - Modrany, Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk •...
  • Page 105 Shinagawa-ku, Tokyo 141-0022, Japan Kazakhstan • Support: http://zyxel.kz/support • Sales E-mail: sales@zyxel.kz • Telephone: +7-3272-590-698 • Fax: +7-3272-590-689 • Web: www.zyxel.kz • Regular Mail: ZyXEL Kazakhstan, 43 Dostyk Ave., Office 414, Dostyk Business Centre, 050010 Almaty, Republic of Kazakhstan NWD-211AN User’s Guide...
  • Page 106 • Support Telephone: +1-800-978-7222 • Sales E-mail: sales@zyxel.com • Sales Telephone: +1-714-632-0882 • Fax: +1-714-632-0858 • Web: www.zyxel.com • Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806-2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no •...
  • Page 107 • Support E-mail: support@zyxel.es • Sales E-mail: sales@zyxel.es • Telephone: +34-902-195-420 • Fax: +34-913-005-345 • Web: www.zyxel.es • Regular Mail: ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spain Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • Telephone: +46-31-744-7700 •...
  • Page 108 • Sales E-mail: sales@zyxel.co.uk • Telephone: +44-1344-303044, 08707-555779 (UK only) • Fax: +44-1344-303034 • Web: www.zyxel.co.uk • FTP: ftp.zyxel.co.uk • Regular Mail: ZyXEL Communications UK Ltd., 11 The Courtyard, Eastern Road, Bracknell, Berkshire RG12 2XB, United Kingdom (UK) NWD-211AN User’s Guide...
  • Page 109: Index

    EAP-PEAP EAP-TLS EAP-TTLS encryption encryption type environmental specifications Basic Service Set, See BSS Extended Service Set, See ESS 21, 89 FCC interference statement CCMP fragmentation threshold Certificate Authority See CA. frequency 19, 54 certifications notices viewing NWD-211AN User’s Guide...
  • Page 110 See IANA threshold 84, 85 LEDs safety warnings lights security 19, 56 LINK LED data encryption Service Set Identity (SSID) SSID 18, 51 subnet subnet mask Message Integrity Check (MIC) 21, 91 subnetting syntax conventions network overlap temperature NWD-211AN User’s Guide...
  • Page 111 WPA supplicants wireless LAN introduction security wireless LAN (WLAN) wireless network wireless security wireless standard WLAN interference security parameters 21, 90 key caching pre-authentication user authentication vs WPA-PSK wireless client supplicant with RADIUS application example NWD-211AN User’s Guide...
  • Page 112 Index NWD-211AN User’s Guide...

Table of Contents