ZyXEL Communications NWA5301-NJ User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Wireless Access Point
  5. NWA5301-NJ
  6. User manual

ZyXEL Communications NWA5301-NJ User Manual

802.11 b/g/n in-wall managed access point
Hide thumbs Also See for NWA5301-NJ:
Table of Contents

Advertisement

Quick Links

Download this manual
NWA5301-NJ
802.11 b/g/n In-wall Managed Access Point
Version 4.10
Edition 1, 12/2013
Quick Start Guide
User's Guide
Default Login Details
LAN IP Address
User Name
Password
www.zyxel.com
http://192.168.1.2
admin
1234
Copyright © 2013 ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications NWA5301-NJ

Summary of Contents for ZyXEL Communications NWA5301-NJ

  • Page 1 NWA5301-NJ 802.11 b/g/n In-wall Managed Access Point Version 4.10 Edition 1, 12/2013 Quick Start Guide User’s Guide Default Login Details LAN IP Address http://192.168.1.2 User Name admin Password 1234 www.zyxel.com Copyright © 2013 ZyXEL Communications Corporation...
  • Page 2 NWA. Note: It is recommended you use the Web Configurator to configure the NWA. • Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information. NWA5301-NJ User’s Guide...

  • Page 3: Table Of Contents

    Monitor ..............................40 Management Mode ..........................50 Network ..............................54 Wireless ..............................61 User .................................70 AP Profile ..............................77 WDS Profile .............................95 Certificates ..............................97 System ..............................114 Log and Report .............................139 File Manager ............................151 Diagnostics ............................162 Reboot ..............................164 Shutdown ..............................165 Troubleshooting ............................166 NWA5301-NJ User’s Guide...

  • Page 4: Table Of Contents

    2.1 Overview ............................22 2.2 Access ...............................22 2.3 Navigating the Web Configurator ......................24 2.3.1 Title Bar ...........................24 2.3.2 Navigation Panel ........................27 2.3.3 Warning Messages ........................30 2.3.4 Tables and Lists ........................30 Part II: Technical Reference................33 Chapter 3 Dashboard ............................35 NWA5301-NJ User’s Guide...
  • Page 5 6.3.1 Port Setting Edit ........................59 6.3.2 VLAN Add/Edit .........................59 Chapter 7 Wireless ...............................61 7.1 Overview ............................61 7.1.1 What You Can Do in this Chapter ....................61 7.1.2 What You Need to Know ......................62 7.2 AP Management ..........................62 7.3 Load Balancing ..........................63 NWA5301-NJ User’s Guide...
  • Page 6 10.1.1 What You Can Do in this Chapter ..................95 10.2 WDS Profile ............................95 10.2.1 Add/Edit WDS Profile ......................96 Chapter 11 Certificates ............................97 11.1 Overview ............................97 11.1.1 What You Can Do in this Chapter ..................97 11.1.2 What You Need to Know ......................97 NWA5301-NJ User’s Guide...
  • Page 7 12.8.2 SNMP Traps ........................136 12.8.3 Configuring SNMP .......................136 12.8.4 Adding or Editing an SNMPv3 User Profile .................138 Chapter 13 Log and Report ..........................139 13.1 Overview ............................139 13.1.1 What You Can Do In this Chapter ..................139 13.2 Email Daily Report ........................139 NWA5301-NJ User’s Guide...
  • Page 8 17.1.1 What You Need To Know .....................165 17.2 Shutdown ............................165 Chapter 18 Troubleshooting..........................166 18.1 Overview ............................166 18.2 Power, Hardware Connections, and LED ..................166 18.3 NWA Access and Login ........................167 18.4 Internet Access ..........................168 18.5 Wireless Connections ........................169 18.6 Resetting the NWA ........................172 NWA5301-NJ User’s Guide...
  • Page 9 Table of Contents 18.7 Getting More Troubleshooting Help ....................172 Appendix A Importing Certificates ....................173 Appendix B IPv6 ..........................187 Appendix C Customer Support ......................196 Appendix D Legal Information ......................202 Index ..............................207 NWA5301-NJ User’s Guide...

  • Page 10: User's Guide

    User’s Guide...

  • Page 12: Introduction

    Your NWA’s business-class reliability, SMB features, and centralized wireless management make it ideally suited for advanced service delivery in mission-critical networks. It uses Multiple BSSID and VLAN to provide simultaneous independent virtual APs. Additionally, innovations in roaming technology and QoS features eliminate voice call disruptions. NWA5301-NJ User’s Guide...

  • Page 13: Management Mode

    (VoIP) users have priority. You also want a regular wireless network for standard users, as well as a ‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for NWA5301-NJ User’s Guide...
  • Page 14 Chapter 1 Introduction guest users. In this example, the guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet. Figure 1 Multiple BSSs NWA5301-NJ User’s Guide...

  • Page 15: Root Ap

    Repeater mode (Z) has a wireless connection to the NWA in Root AP mode (X) which is connected to a wired network and also has a wireless connection to another NWA in Repeater mode (Y) at the same time. Z and Y act as repeaters that forward traffic between associated wireless NWA5301-NJ User’s Guide...

  • Page 16: Ways To Manage The Nwa

    User’s Guide provides information about the Web Configurator. Command-Line Interface (CLI) The CLI allows you to use text-based commands to configure the NWA. You can access it using remote management (for example, SSH or Telnet). See the Command Reference Guide for more information. NWA5301-NJ User’s Guide...

  • Page 17: Good Habits For Managing The Nwa

    Internet access to the NWA through this connection. An 8-pin Ethernet cable has four pairs of color coded wires. Cut out one and a half inches of the jacket from the Ethenet cable to expose the wires. Untwist the wire pairs no more than one inch. NWA5301-NJ User’s Guide...
  • Page 18 PORT PORT PIN# Table 2 Color Codes for 110 Punch Down Block Wiring PIN# WIRE COLOR White/Orange Orange White/Green Blue White/Blue Green White/Brown Brown Use a punch-down tool to seat the wires down properly into the slot. NWA5301-NJ User’s Guide...

  • Page 19: Phone Port

    To use the CLI commands to configure the NWA, connect an RJ-45-to-DB-9 cable to the PHONE port at the bottom of the NWA. For local management, you can use a computer with terminal emulation software configured to the following parameters: NWA5301-NJ User’s Guide...

  • Page 20: Leds

    The NWA is receiving power. Blinking The NWA is starting up. The NWA is not receiving power. Amber There is system error and the NWA cannot boot up. Blinking Firmware upgrade is in progress. The NWA is ready for use. NWA5301-NJ User’s Guide...

  • Page 21: Starting And Stopping The Nwa

    It does not stop the system processes or write cached data to local storage. The NWA does not stop or start the system processes when you apply configuration files or run shell scripts although you may temporarily lose access to network resources. NWA5301-NJ User’s Guide...

  • Page 22: The Web Configurator

    The recommended screen resolution is 1024 x 768 pixels and higher. 2.2 Access Make sure your NWA hardware is properly connected. See the Quick Start Guide. Browse to https://192.168.1.2. The Login screen appears. Enter the user name (default: “admin”) and password (default: “1234”). NWA5301-NJ User’s Guide...
  • Page 23 Otherwise, the dashboard appears. The Update Admin Info screen appears every time you log in using the default user name and default password. If you change the password for the default user account, this screen does not appear anymore. NWA5301-NJ User’s Guide...

  • Page 24: Navigating The Web Configurator

    The icons provide the following functions. Table 6 Title Bar: Web Configurator Icons LABEL DESCRIPTION Logout Click this to log out of the Web Configurator. Help Click this to open the help page for the current screen. NWA5301-NJ User’s Guide...
  • Page 25 This shows the version number of the software that handles the booting process of the NWA. Current Version This shows the firmware version of the NWA. Released Date This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. Click this to close the screen. NWA5301-NJ User’s Guide...
  • Page 26 Figure 8 Site Map Object Reference Click Object Reference to open the Object Reference screen. Select the type of object and the individual object and click Refresh to show which configuration settings reference the object. Figure 9 Object Reference NWA5301-NJ User’s Guide...

  • Page 27: Navigation Panel

    2.3.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure NWA features. Click the arrow in the middle of the right edge of the navigation panel to hide the navigation panel menus or NWA5301-NJ User’s Guide...

  • Page 28: Configuration Menu

    FOLDER OR LINK FUNCTION MGNT Mode Configure the NWA as a standalone AP, or a managed AP Network IP Setting Configuer the IP address for the NWA Ethernet interface. VLAN Manage the Ethernet interface VLAN settings. Wireless NWA5301-NJ User’s Guide...
  • Page 29 Manage and upload configuration files for the NWA. Firmware Package View the current firmware version and to upload firmware. Shell Script Manage and run shell script files for the NWA. Diagnostics Diagnostics Collect diagnostic information. Reboot Restart the NWA. Shutdown Turn off the NWA. NWA5301-NJ User’s Guide...

  • Page 30: Warning Messages

    The options available vary depending on the type of fields in the column. Here are some examples of what you can do: • Sort in ascending alphabetical order • Sort in descending (reverse) alphabetical order • Select which columns to display • Group entries by field • Show entries in groups NWA5301-NJ User’s Guide...
  • Page 31 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time. NWA5301-NJ User’s Guide...
  • Page 32 In some lists you can also use the [Shift] or [Ctrl] key to select multiple entries, and then use the arrow button to move them to the other list. Figure 13 Working with Lists NWA5301-NJ User’s Guide...

  • Page 33: Technical Reference

    Technical Reference...

  • Page 35: Dashboard

    Dashboard icon in the navigation panel. The Dashboard displays general device information, system status, system resource usage, and interface status in widgets that you can re- arrange to suit your needs. You can also collapse, refresh, and close individual widgets. Figure 14 Dashboard NWA5301-NJ User’s Guide...
  • Page 36 This field displays the current date and time in the NWA. The format is yyyy-mm-dd Time hh:mm:ss. Current Login This field displays the user name used to log in to the current session, the amount of User reauthentication time remaining, and the amount of lease time remaining. NWA5301-NJ User’s Guide...
  • Page 37 This indicates the wireless frequency band currently being used by the radio. OP Mode This indicates the radio’s operating mode. Operating modes are AP (MBSSID), Root AP or Repeater. Channel This indicates the channel number the radio is using. NWA5301-NJ User’s Guide...

  • Page 38: Cpu Usage

    3.2.1 CPU Usage Use this screen to look at a chart of the NWA’s recent CPU usage. To access this screen, click CPU Usage in the dashboard. Figure 15 Dashboard > CPU Usage NWA5301-NJ User’s Guide...

  • Page 39: Memory Usage

    The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA5301-NJ User’s Guide...

  • Page 40: Monitor

    • The View Log screen (Section 4.6 on page 47) displays the NWA’s current log messages. You can change the way the log is displayed, you can e-mail the log, and you can also clear the log in this screen. NWA5301-NJ User’s Guide...

  • Page 41: Network Status

    IP address, this field displays n/a. Port Statistics Table Poll Interval Enter how often you want this window to be updated automatically, and click Set Interval. Set Interval Click this to set the Poll Interval the screen uses. NWA5301-NJ User’s Guide...

  • Page 42: Radio List

    Table 18 Monitor > Wireless > AP Information > Radio List LABEL DESCRIPTION More Click this to view additional information about the selected radio’s wireless traffic and Information station count. Information spans a 24 hour period. Status This displays whether or not the radio is enabled. NWA5301-NJ User’s Guide...
  • Page 43 This displays the total number of packets transmitted by the radio. Rx FCS Error This indicates the number of received packet errors accrued by the radio. Count Tx Retry Count This indicates the number of times the radio has attempted to re-transmit packets. NWA5301-NJ User’s Guide...

  • Page 44: Ap Mode Radio Information

    24 hours. To access this window, select a radio and click the More Information button in the Radio List screen. Figure 19 Monitor > Wireless > AP Information > Radio List > More Information NWA5301-NJ User’s Guide...

  • Page 45: Station List

    Click this to close this window. 4.4 Station List Use this screen to view statistics pertaining to the associated stations (or “wireless clients”). Click Monitor > Wireless > Station Info to access this screen. Figure 20 Monitor > Wireless > Station Info NWA5301-NJ User’s Guide...

  • Page 46: Wds Link Info

    Use this screen to view the WDS traffic statistics between the NWA and a root AP or repeaters. Click Monitor > Wireless > WDS Link Info to access this screen. Figure 21 Monitor > Wireless > WDS Link Info NWA5301-NJ User’s Guide...

  • Page 47: View Log

    To access this screen, click Monitor > Log. The log is displayed in the following screen. Note: When a log reaches the maximum number of log messages, new log messages automatically overwrite existing log messages, starting with the oldest existing log message first. NWA5301-NJ User’s Guide...
  • Page 48 Category is Debug Log. Source Address This displays when you show the filter. Type the source IP address of the incoming packet that generated the log message. Do not include the port in this filter. NWA5301-NJ User’s Guide...
  • Page 49 This field displays the destination IP address and the port number of the event that generated the log message. Note This field displays any additional information about the log message. The Web Configurator saves the filter settings if you leave the View Log screen and return to it later. NWA5301-NJ User’s Guide...

  • Page 50: Management Mode

    APs (M1 ~ M4). Figure 23 CAPWAP Network Example Note: The NWA can be a standalone AP (default), or a CAPWAP managed AP. 5.2.1 CAPWAP Discovery and Management The link between CAPWAP-enabled access points proceeds as follows: NWA5301-NJ User’s Guide...

  • Page 51: Managed Ap Finds The Controller

    • Activate DHCP. Your network’s DHCP server must support option 138 defined in RFC 5415. • Configure DHCP option 138 with the IP address of the CAPWAP AP controller on your network. NWA5301-NJ User’s Guide...

  • Page 52: Notes On Capwap

    5.3 Management Mode Screen Use this screen to configure the NWA as a CAPWAP managed AP, or to use it in its default standalone mode. To access this screen, click Configuration > MGNT Mode. NWA5301-NJ User’s Guide...
  • Page 53 AP mode to the NWA and you cannot log in as the web configurator is disabled; you must manage the NWA through the AP controller on your network. Reset Click Reset to return the screen to its last-saved settings. NWA5301-NJ User’s Guide...

  • Page 54: Network

    6.1.1 What You Can Do in this Chapter • The IP Setting screen (Section 6.2 on page 55) configures the NWA’s LAN IP address. • The VLAN screen (Section 6.3 on page 57) configures the NWA’s VLAN settings. NWA5301-NJ User’s Guide...

  • Page 55: Ip Setting

    Enter the IP address of the gateway. The NWA sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the interface. NWA5301-NJ User’s Guide...
  • Page 56 Select this option to obtain the IP address of the DNS server. NTP Server Select this option to obtain the IP address of the NTP server. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA5301-NJ User’s Guide...

  • Page 57: Vlan

    A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. NWA5301-NJ User’s Guide...
  • Page 58 VLAN group that the tag defines. VLAN Member Configuration This is the VLAN’s index number in this list. Status This displays whether or not the VLAN is activated. NWA5301-NJ User’s Guide...

  • Page 59: Port Setting Edit

    Click OK to save your changes back to the NWA. Cancel Click Cancel to close the window with changes unsaved. 6.3.2 VLAN Add/Edit Use this screen to create a new VLAN or configure an existing VLAN on the NWA. NWA5301-NJ User’s Guide...
  • Page 60 This indicates whether the selected port tags outbound traffic with this VLAN’s ID . Click this field to edit the value. Click OK to save your changes back to the NWA. Cancel Click Cancel to close the window with changes unsaved. NWA5301-NJ User’s Guide...

  • Page 61: Wireless

    62) manages the NWA’s general wireless settings. • The Load Balancing screen (Section 7.3 on page 63) configures network traffic load balancing between the APs and the NWA. • The DCS screen (Section 7.4 on page 66) configures dynamic radio channel selection. NWA5301-NJ User’s Guide...

  • Page 62: What You Need To Know

    AP does not become overloaded. 7.2 AP Management Use this screen to manage the NWA’s general wireless settings. Click Configuration > Wireless > AP Management to access this screen. Figure 33 Configuration > Wireless > AP Management NWA5301-NJ User’s Guide...

  • Page 63: Load Balancing

    7.3 Load Balancing Use this screen to configure wireless network traffic load balancing between the APs on your network. Click Configuration > Wireless > Load Balancing to access this screen. Figure 34 Configuration > Wireless > Load Balancing NWA5301-NJ User’s Guide...

  • Page 64: Disassociating And Delaying Connections

    For example, here the AP has a balanced bandwidth allotment of 6 Mbps. If laptop R connects and it pushes the AP over its allotment, say to 7 Mbps, then the AP delays the red laptop’s connection NWA5301-NJ User’s Guide...
  • Page 65 If no connections are idle, the next criteria the NWA analyzes is signal strength. Devices with the weakest signal strength are kicked first. NWA5301-NJ User’s Guide...

  • Page 66: Dcs

    Select this to have the AP wait until all connected clients have disconnected before Aware switching channels. If you disable this then the AP switches channels immediately regardless of any client connections. In this instance, clients that are connected to the AP when it switches channels are dropped. NWA5301-NJ User’s Guide...

  • Page 67: Technical Reference

    Dynamic channel selection frees the network administrator from this task by letting the AP do it automatically. The AP can scan the area around it looking for the channel with the least amount of interference. NWA5301-NJ User’s Guide...
  • Page 68 AP, signal strength, activity, and so on. Finally, there is an alternative four channel scheme for ETSI, consisting of channels 1, 5, 9, 13. This offers significantly less overlap that the other one. Figure 40 An Alternative Four-Channel Deployment NWA5301-NJ User’s Guide...
  • Page 69 AP has the bandwidth to spare. If too many people connect and the AP hits its bandwidth cap then all new connections must basically wait for their turn or get shunted to the nearest identical AP. NWA5301-NJ User’s Guide...

  • Page 70: User

    WWW, TELNET, SSH Perform basic diagnostics (CLI) Access Users user Used for the embedded RADIUS server and SNMPv3 user access Browse user-mode commands (CLI) Note: The default admin account is always authenticated locally, regardless of the authentication method setting. NWA5301-NJ User’s Guide...

  • Page 71: User Summary

    The User Add/Edit screen allows you to create a new user account or edit an existing one. 8.2.1.1 Rules for User Names Enter a user name from 1 to 31 characters. The user name can only contain the following characters: NWA5301-NJ User’s Guide...
  • Page 72 • root • shutdown • sshd • sync • uucp • zyxel To access this screen, go to the User screen, and click Add or Edit. Figure 42 Configuration > Object > User > Add/Edit A User NWA5301-NJ User’s Guide...

  • Page 73: Setting

    Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. 8.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the NWA. NWA5301-NJ User’s Guide...
  • Page 74 This is the default lease time in minutes for each type of user account. It defines the number of minutes the user has to renew the current session before the user is logged out. Admin users renew the session every time the main screen refreshes in the Web Configurator. NWA5301-NJ User’s Guide...

  • Page 75: Edit User Authentication Timeout Settings

    To access this screen, go to the Configuration > Object > User > Setting screen, select one of the Default Authentication Timeout Settings entry and click the Edit icon. Figure 44 User > Setting > Edit User Authentication Timeout Settings NWA5301-NJ User’s Guide...
  • Page 76 0 to make the number of minutes unlimited. Unlike Lease Time, the user has no opportunity to renew the session without logging out. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA5301-NJ User’s Guide...

  • Page 77: Ap Profile

    The SSID (Service Set IDentifier) is the name that identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. In other words, it is the name of the wireless network that clients use to connect to it. NWA5301-NJ User’s Guide...

  • Page 78: Radio

    Table 36 Configuration > Object > AP Profile > Radio LABEL DESCRIPTION Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile. NWA5301-NJ User’s Guide...
  • Page 79 This field indicates the name assigned to the radio profile. Frequency Band This field indicates the frequency band which this radio profile is configured to use. Channel ID This field indicates the broadcast channel which this radio profile is configured to use. NWA5301-NJ User’s Guide...

  • Page 80: Add/Edit Radio Profile

    This screen allows you to create a new radio profile or edit an existing one. To access this screen, click the Add button or select a radio profile from the list and click the Edit button. Figure 46 Configuration > Object > AP Profile > Add/Edit Profile NWA5301-NJ User’s Guide...
  • Page 81 802.11n headers and wraps the header-less payload in a single 802.11n MAC header. This method is useful for increasing bandwidth throughput. It is also more efficient than A-MPDU except in environments that are prone to high error rates. NWA5301-NJ User’s Guide...
  • Page 82 MCS Rate - Set the MCS rate configuration. EEE 802.11n supports many different data rates which are called MCS rates. MCS stands for Modulation and Coding Scheme. This is an 802.11n feature that increases the wireless network performance in terms of throughput. Multicast Settings NWA5301-NJ User’s Guide...

  • Page 83: Ssid

    (such as the WiFi adapter in a laptop), and is displayed as the wireless network name when a person makes a connection to it. To access this screen click Configuration > Object > AP Profile > SSID. NWA5301-NJ User’s Guide...
  • Page 84 This field indicates which (if any) MAC filter Profile is associated with the SSID profile. Profile Layer-2 Isolation This field indicates which (if any) layer-2 isolation Profile is associated with the SSID Profile profile. VLAN ID This field indicates the VLAN ID associated with the SSID profile. NWA5301-NJ User’s Guide...

  • Page 85: Add/Edit Ssid Profile

    MAC filtering allows you to limit the wireless clients connecting to your network through a particular SSID by wireless client MAC addresses. Any clients that have MAC addresses not in the MAC filtering profile of allowed addresses are denied connections. The disable setting means no MAC filtering is used. NWA5301-NJ User’s Guide...

  • Page 86: Security List

    9.4 Security List This screen allows you to manage wireless security configurations that can be used by your SSIDs. Wireless security is implemented strictly between the AP broadcasting the SSID and the stations that are connected to it. NWA5301-NJ User’s Guide...

  • Page 87: Add/Edit Security Profile

    9.4.1 Add/Edit Security Profile This screen allows you to create a new security profile or edit an existing one. To access this screen, click the Add button or select a security profile from the list and click the Edit button. NWA5301-NJ User’s Guide...
  • Page 88 Chapter 9 AP Profile Note: This screen’s options change based on the Security Mode selected. Only the default screen is displayed here. Figure 50 SSID > Security Profile > Add/Edit Security Profile NWA5301-NJ User’s Guide...
  • Page 89 Enter 26 hexadecimal digits in the range of “A-F”, “a-f” and “0-9” (for example, 0x00112233445566778899AABBCC) for each Key used. • Enter 13 ASCII characters (case sensitive) ranging from “a-z”, “A-Z” and “0-9” (for example, MyKey12345678) for each Key used. NWA5301-NJ User’s Guide...

  • Page 90: Mac Filter List

    SSIDs. To access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List. Note: You can have a maximum of 32 MAC filtering profiles on the NWA. Figure 51 Configuration > Object > AP Profile > SSID > MAC Filter List NWA5301-NJ User’s Guide...

  • Page 91: Add/Edit Mac Filter Profile

    Add button or select a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of 512 MAC addresses. Figure 52 SSID > MAC Filter List > Add/Edit MAC Filter Profile NWA5301-NJ User’s Guide...

  • Page 92: Layer-2 Isolation List

    (C) while preventing the client from accessing other computers and servers on the network. The client can communicate with other wireless clients only if Intra-BSS Traffic blocking is disabled. Note: Intra-BSS Traffic Blocking is activated when you enable layer-2 isolation. Figure 53 Layer-2 Isolation Application NWA5301-NJ User’s Guide...

  • Page 93: Add/Edit Layer-2 Isolation Profile

    This screen allows you to create a new layer-2 isolation profile or edit an existing one. To access this screen, click the Add button or select a layer-2 isolation profile from the list and click the Edit button. NWA5301-NJ User’s Guide...
  • Page 94 Enter up to 60 characters, spaces and underscores allowed. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA5301-NJ User’s Guide...

  • Page 95: Wds Profile

    This field is a sequential value, and it is not associated with a specific profile. Profile Name This field indicates the name assigned to the profile. WDS SSID This field shows the SSID specified in this WDS profile. NWA5301-NJ User’s Guide...

  • Page 96: Add/Edit Wds Profile

    64 hexadecimal characters. The key is used to encrypt the traffic between the APs. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA5301-NJ User’s Guide...

  • Page 97: Certificates

    Jenny receives the message and uses Tim’s public key to verify it. Jenny knows that the message is from Tim, and that although other people may have been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim’s private key). NWA5301-NJ User’s Guide...
  • Page 98 The NWA currently allows the importation of a PKS#7 file that contains a single certificate. • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. NWA5301-NJ User’s Guide...

  • Page 99: Verifying A Certificate

    Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation. Possible examples would be over the telephone or through an HTTPS connection. NWA5301-NJ User’s Guide...

  • Page 100: My Certificates

    Use the My Certificate Import screen to import the certificate and replace the request. SELF represents a self-signed certificate. CERT represents a certificate issued by a certification authority. NWA5301-NJ User’s Guide...
  • Page 101 Expired! message if the certificate has expired. Import Click Import to open a screen where you can save a certificate to the NWA. Refresh Click Refresh to display the current validity status of the certificates. NWA5301-NJ User’s Guide...

  • Page 102: Add My Certificates

    Add My Certificates screen. Use this screen to have the NWA create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request. Figure 59 Configuration > Object > Certificate > My Certificates > Add NWA5301-NJ User’s Guide...
  • Page 103 Certificate Edit screen to view the certification request and copy it to send to the locally for later certification authority. manual enrollment Copy the certification request from the My Certificate Edit screen and then send it to the certification authority. NWA5301-NJ User’s Guide...
  • Page 104 Add My Certificates screen. Click Return and check your information in the Add My Certificates screen. Make sure that the certification authority information is correct and that your Internet connection is working properly if you want the NWA to enroll a certificate online. NWA5301-NJ User’s Guide...

  • Page 105: Edit My Certificates

    Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open the My Certificate Edit screen. You can use this screen to view in-depth certificate information and change the certificate’s name. Figure 60 Configuration > Object > Certificate > My Certificates > Edit NWA5301-NJ User’s Guide...
  • Page 106 This field displays general information about the certificate. For example, Subject Type=CA means that this is a certification authority’s certificate and “Path Length Constraint=1” means that there can only be one certification authority in the certificate’s path. This field does not display for a certification request. NWA5301-NJ User’s Guide...

  • Page 107: Import Certificates

    Note: You can import a certificate that matches a corresponding certification request that was generated by the NWA. You can also import a certificate in PKCS#12 format, including the certificate’s public and private keys. The certificate you import replaces the corresponding request in the My Certificates screen. NWA5301-NJ User’s Guide...

  • Page 108: Trusted Certificates

    Click Configuration > Object > Certificate > Trusted Certificates to open the Trusted Certificates screen. This screen displays a summary list of certificates that you have set the NWA to accept as trusted. The NWA also accepts any valid certificate signed by a certificate on this list as NWA5301-NJ User’s Guide...
  • Page 109 Click Import to open a screen where you can save the certificate of a certification authority that you trust, from your computer to the NWA. Refresh Click this button to display the current validity status of the certificates. NWA5301-NJ User’s Guide...

  • Page 110: Edit Trusted Certificates

    NWA to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. Figure 63 Configuration > Object > Certificate > Trusted Certificates > Edit NWA5301-NJ User’s Guide...
  • Page 111 Common Name (CN), Organizational Unit (OU), Organization (O) and Country (C). Issuer This field displays identifying information about the certificate’s issuing certification authority, such as Common Name, Organizational Unit, Organization and Country. With self-signed certificates, this is the same information as in the Subject Name field. NWA5301-NJ User’s Guide...

  • Page 112: Import Trusted Certificates

    Click Cancel to quit and return to the Trusted Certificates screen. 11.3.2 Import Trusted Certificates Click Configuration > Object > Certificate > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to save a trusted certificate to the NWA. NWA5301-NJ User’s Guide...

  • Page 113: Technical Reference

    The second is a reduction in network traffic since the NWA only gets information on the certificates that it needs to verify, not a huge list. When the NWA requests certificate status information, the OCSP server returns a “expired”, “current” or “unknown” response. NWA5301-NJ User’s Guide...

  • Page 114: System

    12.2 Host Name A host name is the unique name by which a device is known on a network. Click Configuration > System > Host Name to open this screen. Figure 65 Configuration > System > Host Name NWA5301-NJ User’s Guide...

  • Page 115: Date And Time

    To change your NWA’s time based on your local time zone and date, click Configuration > System > Date/Time. The screen displays as shown. You can manually set the NWA’s time and date or have the NWA get the date and time from a time server. Figure 66 Configuration > System > Date/Time NWA5301-NJ User’s Guide...
  • Page 116 (1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, March. The time you type in the at field depends on your time zone. In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). NWA5301-NJ User’s Guide...

  • Page 117: Pre-Defined Ntp Time Servers List

    Click the Sync. Now button to get the time and date from the time server you specified in the Time Server Address field. When the Loading message appears, you may have to wait up to one minute. Figure 67 Loading NWA5301-NJ User’s Guide...
  • Page 118 Click System > Date/Time. Select Get from Time Server under Time and Date Setup. Under Time Zone Setup, select your Time Zone from the list. Under Time and Date Setup, enter a Time Server Address. Click Apply. NWA5301-NJ User’s Guide...

  • Page 119: Www Overview

    (one party can identify the other party) and data integrity (you know if data has been changed). It relies upon certificates, public keys, and private keys (see Chapter 11 on page 97 for more information). NWA5301-NJ User’s Guide...
  • Page 120 HTTP connection requests from a web browser go to port 80 (by default) on the NWA’s web server. Figure 69 HTTP/HTTPS Implementation Note: If you disable HTTP in the WWW screen, then the NWA blocks all HTTP connection attempts. NWA5301-NJ User’s Guide...

  • Page 121: Configuring Www Service Control

    IP address(es) in the Service Control table to access the NWA Web Configurator using HTTP connections. Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service to access the NWA. NWA5301-NJ User’s Guide...

  • Page 122: Https Example

    Click Technical Details if you want to verify more information about the certificate from the NWA. Select I Understand the Risks and then click Add Exception to add the NWA to the security exception list. Click Confirm Security Exception. NWA5301-NJ User’s Guide...
  • Page 123 • The issuing certificate authority of the NWA’s HTTPS server certificate is not one of the browser’s trusted certificate authorities. The issuing certificate authority of the NWA's factory default certificate is the NWA itself since the certificate is a self-signed certificate. NWA5301-NJ User’s Guide...
  • Page 124 Apply for a certificate from a Certification Authority (CA) that is trusted by the NWA (see the NWA’s Trusted Certificates Web Configurator screen). Figure 74 Trusted Certificates The CA sends you a package containing the CA’s trusted certificate(s), your personal certificate(s) and a password to install the personal certificate(s). NWA5301-NJ User’s Guide...
  • Page 125 You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment. Double-click the personal certificate given to you by the CA to produce a screen similar to the one shown next NWA5301-NJ User’s Guide...
  • Page 126 Chapter 12 System Click Next to begin the wizard. The file name and path of the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA5301-NJ User’s Guide...
  • Page 127 Chapter 12 System Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA5301-NJ User’s Guide...
  • Page 128 You should see the following screen when the certificate is correctly installed on your computer. 12.4.5.7 Using a Certificate When Accessing the NWA To access the NWA via HTTPS: Enter ‘https://NWA IP Address/ in your browser’s web address field. NWA5301-NJ User’s Guide...

  • Page 129: Ssh

    In the following figure, computer B on the Internet uses SSH to securely connect to the NWA (A) for a management session. Figure 75 SSH Communication Over the WAN Example NWA5301-NJ User’s Guide...

  • Page 130: How Ssh Works

    After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server. The client then sends its authentication information (user name and password) to the server to log in to the server. NWA5301-NJ User’s Guide...

  • Page 131: Ssh Implementation On The Nwa

    Select the certificate whose corresponding private key is to be used to identify the NWA for Certificate SSH connections. You must have certificates already configured in the My Certificates screen. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA5301-NJ User’s Guide...

  • Page 132: Examples Of Secure Telnet Using Ssh

    22 on the NWA (using the default IP address of 192.168.1.2). A message displays indicating the SSH protocol version supported by the NWA. Figure 79 SSH Example 2: Test $ telnet 192.168.1.2 22 Trying 192.168.1.2... Connected to 192.168.1.2. Escape character is '^]'. SSH-1.5-1.0.0 NWA5301-NJ User’s Guide...

  • Page 133: Telnet

    You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA5301-NJ User’s Guide...

  • Page 134: Ftp

    Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your NWA supports SNMP agent functionality, which allows a manager station to manage and monitor the NWA through the network. The NWA supports SNMP version one NWA5301-NJ User’s Guide...
  • Page 135 Get operation, followed by a series of GetNext operations. • Set - Allows the manager to set values for object variables within an agent. • Trap - Used by the agent to inform the manager of some events. NWA5301-NJ User’s Guide...

  • Page 136: Supported Mibs

    To change your NWA’s SNMP settings, click Configuration > System > SNMP tab. The screen appears as shown. Use this screen to configure your SNMP settings. You can also configure user profiles that define allowed SNMPv3 access. Figure 84 Configuration > System > SNMP NWA5301-NJ User’s Guide...
  • Page 137 This field displays whether the SNMPv3 user can have read-only or read and write access to the NWA using this SNMPv3 user profile. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA5301-NJ User’s Guide...

  • Page 138: Adding Or Editing An Snmpv3 User Profile

    Select whether the SNMPv3 user can have read-only or read and write access to the NWA using this SNMPv3 user profile. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA5301-NJ User’s Guide...

  • Page 139: Log And Report

    13.2 Email Daily Report Use this screen to start or stop data collection and view various statistics about traffic passing through your NWA. Note: Data collection may decrease the NWA’s traffic throughput rate. NWA5301-NJ User’s Guide...
  • Page 140 Table 65 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION Enable Email Select this to send reports by e-mail every day. Daily Report Mail Server Type the name or IP address of the outgoing SMTP server. NWA5301-NJ User’s Guide...

  • Page 141: Log Setting

    Alternatively, if you want to edit what events is included in each log, you can also use the Active Log Summary screen to edit this information for all logs at the same time. NWA5301-NJ User’s Guide...

  • Page 142: Log Setting Screen

    Internal - system log; you can view the log on the View Log tab. VRPT/Syslog - ZyXEL’s Vantage Report, syslog-compatible format. CEF/Syslog - Common Event Format, syslog-compatible format. Summary This field is a summary of the settings for each log. NWA5301-NJ User’s Guide...

  • Page 143: Edit System Log Settings

    This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. Figure 88 Configuration > Log & Report > Log Setting > Edit System Log Setting NWA5301-NJ User’s Guide...
  • Page 144 Using the System Log drop-down list to disable all logs overrides your e-mail server 1 settings. enable normal logs (green check mark) - e-mail log messages for all categories to e-mail server 1. enable alert logs (red exclamation point) - e-mail alerts for all categories to e-mail server 1. NWA5301-NJ User’s Guide...
  • Page 145 “[count=x]”, where x is the number of original log messages, appended at the end of the Message field. Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA5301-NJ User’s Guide...

  • Page 146: Edit Remote Server

    This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. Figure 89 Configuration > Log & Report > Log Setting > Edit Remote Server NWA5301-NJ User’s Guide...

  • Page 147: Active Log Summary

    13.3.4 Active Log Summary This screen allows you to view and to edit what information is included in the system log, e-mail profiles, and remote servers at the same time. It does not let you change other log settings (for NWA5301-NJ User’s Guide...
  • Page 148 Figure 90 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) NWA5301-NJ User’s Guide...
  • Page 149 (green checkmark) - create log messages and alerts from this category enable normal logs and debug logs (yellow check mark) - create log messages, alerts, and debugging information from this category; the NWA does not e-mail debugging information, however, even if this setting is selected. NWA5301-NJ User’s Guide...
  • Page 150 (yellow check mark) - log regular information, alerts, and debugging information from this category Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA5301-NJ User’s Guide...

  • Page 151: File Manager

    # enter configuration mode configure terminal # change administrator password username admin password 4321 user-type admin #configure default radio profile, change 2GHz channel to 11 & Tx output power # to wlan-radio-profile default 2g-channel 11 output-power 50% exit write NWA5301-NJ User’s Guide...

  • Page 152: Configuration File

    The NWA still generates a log for any errors. 14.2 Configuration File Click Maintenance > File Manager > Configuration File to open this screen. Use the Configuration File screen to store, run, and name configuration files. You can also download NWA5301-NJ User’s Guide...
  • Page 153 The NWA still generates a log for any errors. Figure 91 Maintenance > File Manager > Configuration File Do not turn off the NWA while configuration file upload is in progress. NWA5301-NJ User’s Guide...
  • Page 154 Specify a name for the duplicate configuration file. Use up to 25 characters (including a-zA- Z0-9;‘~!@#$%^&()_+[]{}’,.=-). Click OK to save the duplicate or click Cancel to close the screen without saving a duplicate of the configuration file. NWA5301-NJ User’s Guide...
  • Page 155 This column displays the number for each configuration file entry. This field is a sequential value, and it is not associated with a specific address. The total number of configuration files that you can save depends on the sizes of the configuration files and the available flash storage space. NWA5301-NJ User’s Guide...

  • Page 156: Example Of Configuration File Download Using Ftp

    Enter your password as requested. Use “cd” to change to the directory that contains the files you want to download. Use “dir” or “ls” if you need to display a list of the files in the directory. NWA5301-NJ User’s Guide...

  • Page 157: Firmware Package

    See the CLI Reference Guide for how to determine if you need to recover the firmware and how to recover it. Find the firmware package at www.zyxel.com in a file that (usually) uses a .bin extension. NWA5301-NJ User’s Guide...
  • Page 158 The NWA automatically restarts causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 93 Network Temporarily Disconnected After five minutes, log in again and check your new firmware version in the Dashboard screen. NWA5301-NJ User’s Guide...

  • Page 159: Example Of Firmware Upload Using Ftp

    10 Enter “quit” to exit the ftp prompt. 14.4 Shell Script Use shell script files to have the NWA use commands that you specify. Use a text editor to create the shell script files. They must use a “.zysh” filename extension. NWA5301-NJ User’s Guide...
  • Page 160 Use this button to have the NWA use a specific shell script file. Click a shell script file’s row to select it and click Run to have the NWA use that shell script file. You may need to wait awhile for the NWA to finish applying the commands. NWA5301-NJ User’s Guide...
  • Page 161 Type in the location of the file you want to upload in this field or click Browse ... to find it. Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA5301-NJ User’s Guide...

  • Page 162: Diagnostics

    This is the name of the most recently created diagnostic file. Last modified This is the date and time that the last diagnostic file was created. The format is yyyy-mm-dd hh:mm:ss. Size This is the size of the most recently created diagnostic file. NWA5301-NJ User’s Guide...
  • Page 163 Chapter 15 Diagnostics Table 74 Maintenance > Diagnostics LABEL DESCRIPTION Collect Now Click this to have the NWA create a new diagnostic file. Download Click this to save the most recent diagnostic file to a computer. NWA5301-NJ User’s Guide...

  • Page 164: Reboot

    Click the Reboot button to restart the NWA. Wait a few minutes until the login screen appears. If the login screen does not appear, type the IP address of the device in your Web browser. You can also use the CLI command reboot to restart the NWA. NWA5301-NJ User’s Guide...

  • Page 165: Shutdown

    Click the Shutdown button to shut down the NWA. Wait for the device to shut down before you manually turn off or remove the power. It does not turn off the power. You can also use the CLI command shutdown to shutdown the NWA. NWA5301-NJ User’s Guide...

  • Page 166: Troubleshooting

    Section 1.5 on page Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the PoE power injector or PoE switch to the NWA. NWA5301-NJ User’s Guide...

  • Page 167: Nwa Access And Login

    Reset the device to its factory defaults, and try to access the NWA with the default IP address. See Section 18.6 on page 172. If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions NWA5301-NJ User’s Guide...

  • Page 168: Internet Access

    Ignore the suggestions about your browser. 18.4 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LED is behaving as expected. See the Quick Start Guide and Section 18.2 on page 166. NWA5301-NJ User’s Guide...

  • Page 169: Wireless Connections

    Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. 18.5 Wireless Connections I cannot access the NWA or ping any computer from the WLAN. NWA5301-NJ User’s Guide...
  • Page 170 A PKCS #7 file is used to transfer a public key certificate. The private key is not included. The NWA currently allows the importation of a PKS#7 file that contains a single certificate. NWA5301-NJ User’s Guide...
  • Page 171 • Make sure that all the APs are in the same broadcast domain. • Make sure that the wireless clients are in range of the other APs; if they are only in range of a single AP, then load balancing may not be as effective. NWA5301-NJ User’s Guide...

  • Page 172: Resetting The Nwa

    Release the RESET button, and wait for the NWA to restart. You should be able to access the NWA using the default settings. 18.7 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more troubleshooting suggestions. NWA5301-NJ User’s Guide...

  • Page 173: Appendix A Importing Certificates

    ) somewhere in the main browser window (not all browsers show the padlock in the same location). Internet Explorer The following example uses Microsoft Internet Explorer 7 on Windows XP Professional; however, they can also apply to Internet Explorer on Windows Vista. NWA5301-NJ User’s Guide...
  • Page 174 If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Continue to this website (not recommended). In the Address Bar, click Certificate Error > View certificates. NWA5301-NJ User’s Guide...
  • Page 175 Appendix A Importing Certificates In the Certificate dialog box, click Install Certificate. In the Certificate Import Wizard, click Next. NWA5301-NJ User’s Guide...
  • Page 176 Next again and then go to step 9. Otherwise, select Place all certificates in the following store and then click Browse. In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK. NWA5301-NJ User’s Guide...
  • Page 177 Appendix A Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. 10 If you are presented with another Security Warning, click Yes. 11 Finally, click OK when presented with the successful certificate installation message. NWA5301-NJ User’s Guide...
  • Page 178 Double-click the public key certificate file. In the security warning dialog box, click Open. Refer to steps 4-12 in the Internet Explorer procedure beginning on page 173 to complete the installation process. NWA5301-NJ User’s Guide...
  • Page 179 This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP. Open Internet Explorer and click Tools > Internet Options. In the Internet Options dialog box, click Content > Certificates. NWA5301-NJ User’s Guide...
  • Page 180 In the Certificates confirmation, click Yes. In the Root Certificate Store dialog box, click Yes. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA5301-NJ User’s Guide...
  • Page 181 The certificate is stored and you can now connect securely to the Web Configurator. A sealed padlock appears in the address bar, which you can click to open the Page Info > Security window to view the web page’s security information. NWA5301-NJ User’s Guide...
  • Page 182 Rather than browsing to a ZyXEL Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA5301-NJ User’s Guide...
  • Page 183 The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the web page’s security information. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox 2. NWA5301-NJ User’s Guide...
  • Page 184 Appendix A Importing Certificates Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA5301-NJ User’s Guide...
  • Page 185 Delete. In the Delete Web Site Certificates dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA5301-NJ User’s Guide...
  • Page 186 NWA5301-NJ User’s Guide...

  • Page 187: Appendix B Ipv6

    “private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 75 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits NWA5301-NJ User’s Guide...
  • Page 188 FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 77 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 NWA5301-NJ User’s Guide...
  • Page 189 (beginning with fe80). When the interface is connected to a network with a router and the NWA is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates another address which NWA5301-NJ User’s Guide...
  • Page 190 The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, In IPv6, all network interfaces can be associated with several addresses. NWA5301-NJ User’s Guide...
  • Page 191 When the NWA needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the NWA uses the prefix list to NWA5301-NJ User’s Guide...
  • Page 192 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. NWA5301-NJ User’s Guide...
  • Page 193 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. NWA5301-NJ User’s Guide...
  • Page 194 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. NWA5301-NJ User’s Guide...
  • Page 195 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 NWA5301-NJ User’s Guide...

  • Page 196: Appendix C Customer Support

    • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
  • Page 197 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
  • Page 198 Appendix C Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications •...
  • Page 199 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
  • Page 200 • http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ NWA5301-NJ User’s Guide...
  • Page 201 Appendix C Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NWA5301-NJ User’s Guide...

  • Page 202: Appendix D Legal Information

    The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.

  • Page 203: Zyxel Limited Warranty

    Hereby, ZyXEL declares that this equipment is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. [Spanish] Por medio de la presente ZyXEL declara que el equipo cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. NWA5301-NJ User’s Guide...
  • Page 204 The following countries have restrictions and/or requirements in addition to those given in the table labeled “Overview of Regulatory Requirements for Wireless LANs”:. Overview of Regulatory Requirements for Wireless LANs Frequency Band (MHz) Max Power Level Indoor ONLY Indoor and Outdoor (EIRP) (mW) 2400-2483.5 5150-5350 5470-5725 1000 Belgium NWA5301-NJ User’s Guide...

  • Page 205: Safety Warnings

    Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one. • Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. NWA5301-NJ User’s Guide...
  • Page 206 Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. Environmental Product Declaration NWA5301-NJ User’s Guide...

  • Page 207: Index

    Web Configurator and certificates Common Event Format (CEF) 142, 147 CA (Certificate Authority), see certificates configuration CAPWAP 50, 52 information CEF (Common Event Format) 142, 147 configuration files Certificate Authority (CA) at restart see certificates backing up NWA5301-NJ User’s Guide...
  • Page 208 DHCP and domain name diagnostics Guide Digital Signature Algorithm public-key algorithm, CLI Reference see DSA Quick Start disclaimer documentation related domain name DTLS HTTP over SSL, see HTTPS dynamic channel selection redirect to HTTPS vs HTTPS HTTPS NWA5301-NJ User’s Guide...
  • Page 209 MAC address unspecified address range maintenance management Management Information Base (MIB) 135, 136 Management Mode Java CAPWAP and DHCP permissions CAPWAP and IP Subnets JavaScripts managed AP standalone mode management mode managing the device NWA5301-NJ User’s Guide...
  • Page 210 SCEP (Simple Certificate Enrollment Protocol) screen resolution pop-up windows Secure Socket Layer, see SSL power off serial number power on service control product registration and users Public-Key Infrastructure (PKI) limitations timeouts public-private key pairs NWA5301-NJ User’s Guide...
  • Page 211 SSID profile configuration files pre-configured firmware shell scripts SSID profiles usage 36, 38 starting the device flash startup-config.conf memory 36, 39 if errors onboard flash missing at restart present at restart user authentication startup-config-bad.conf user name station rules NWA5301-NJ User’s Guide...
  • Page 212 142, 147 warm start warning message popup warranty note 12, 15 Web Configurator 16, 22 access requirements supported browsers web configurator WEP (Wired Equivalent Privacy) Wi-Fi Protected Access wireless channel wireless client Wireless Distribution System (WDS) wireless LAN NWA5301-NJ User’s Guide...

Table of Contents