ZyXEL Communications ZyAir Access Point Series User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Wireless Access Point
  5. ZyAIR Wireless Gateway Series
  6. User manual

ZyXEL Communications ZyAir Access Point Series User Manual

Zyair access point series
Hide thumbs Also See for ZyAir Access Point Series:
Table of Contents

Advertisement

Quick Links

See also: User Manual
ZyAIR
Access Point Series
User's Guide
Version 3.50
March 2004

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ZyAir Access Point Series and is the answer not in the manual?

Questions and answers

Related Manuals for ZyXEL Communications ZyAir Access Point Series

Summary of Contents for ZyXEL Communications ZyAir Access Point Series

  • Page 1 ZyAIR Access Point Series User's Guide Version 3.50 March 2004...
  • Page 2 Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
  • Page 3 ZyAIR Access Point Series User’s Guide Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.

  • Page 4: Zyxel Limited Warranty

    ZyAIR Access Point Series User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and...

  • Page 5: Customer Support

    ZyAIR Access Point Series User’s Guide Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it.
  • Page 6 ZyAIR Access Point Series User’s Guide METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION SWEDEN support@zyxel.se +46 31 744 7700 www.zyxel.se ZyXEL Communications A/S Sjöporten 4, 41764 Göteborg sales@zyxel.se +46 31 744 7701 Sweden FINLAND support@zyxel.fi...

  • Page 7: Table Of Contents

    ZyAIR Access Point Series User’s Guide Table of Contents Copyright .................................ii Federal Communications Commission (FCC) Interference Statement .............iii ZyXEL Limited Warranty..........................iv Customer Support............................v List of Figures..............................xii List of Tables..............................xv Preface................................xvii OVERVIEW ..............................I Chapter 1 Getting to Know Your ZyAIR ....................1-1 Introducing the ZyAIR Access Point Series................1-1...
  • Page 8 ZyAIR Access Point Series User’s Guide Wireless LAN Overview......................5-1 5.1.1 IBSS...........................5-1 5.1.2 BSS ............................5-1 5.1.3 ESS ............................5-2 Wireless LAN Basics.........................5-3 5.2.1 RTS/CTS..........................5-3 5.2.2 Fragmentation Threshold ....................5-4 Spanning Tree Protocol (STP) ....................5-5 5.3.1 Rapid STP ..........................5-5 5.3.2 STP Terminology.......................5-5 5.3.3 How STP Works ........................5-6 5.3.4...
  • Page 9 ZyAIR Access Point Series User’s Guide 6.14.3 Authentication Required: WPA-PSK ................6-19 6.15 Configuring Local User Database ....................6-21 6.16 Configuring RADIUS ......................6-23 Chapter 7 Multiple ESS and VLAN ......................7-1 Wireless LAN Infrastructures ....................7-1 7.1.1 Multiple ESS ........................7-1 7.1.2 Notes on Multiple-ESS.......................7-1 7.1.3...
  • Page 10 ZyAIR Access Point Series User’s Guide 11.2 Changing the System Password ....................11-1 11.3 ZyAIR SMT Menu Overview Example...................11-2 11.4 Navigating the SMT Interface....................11-4 11.4.1 System Management Terminal Interface Summary............11-5 Chapter 12 General Setup.........................12-1 12.1 General Setup...........................12-1 12.1.1 Procedure To Configure Menu 1..................12-1 Chapter 13 LAN Setup ..........................13-1...
  • Page 11 ZyAIR Access Point Series User’s Guide 19.2.2 Using the FTP command from the DOS Prompt..............19-3 19.2.3 Backup Configuration Using TFTP .................19-4 19.2.4 Example: TFTP Command....................19-4 19.3 Restore Configuration ......................19-5 19.4 Uploading Firmware and Configuration Files................19-6 19.4.1 Firmware Upload ......................19-7 19.4.2 Configuration File Upload ....................19-7...

  • Page 12: List Of Figures

    ZyAIR Access Point Series User’s Guide List of Figures Figure 1-1 PoE Installation Example ......................1-3 Figure 1-2 WDS Functionality Example ......................1-5 Figure 1-3 Access Point Application.......................1-7 Figure 1-4 Multiple ESS Application ......................1-8 Figure 1-5 AP+Bridge Application .........................1-9 Figure 1-6 Bridge Mode Application......................1-10 Figure 1-7 Repeater Mode Application......................1-10...
  • Page 13 ZyAIR Access Point Series User’s Guide Figure 6-13 RADIUS ........................... 6-23 Figure 7-1 Multi-ESS with VLAN Example....................7-3 Figure 7-2 Wireless : Multiple ESS ....................... 7-4 Figure 7-3 Wireless : Edit ESS........................7-6 Figure 7-4 MAC Filter Summary........................7-8 Figure 7-5 VLAN............................7-9 Figure 8-1 IP Setup ............................
  • Page 14 ZyAIR Access Point Series User’s Guide Figure 14-1 Menu 14- Dial-in User Setup ....................14-1 Figure 14-2 Menu 14.1- Edit Dial-in User....................14-1 Figure 15-1 Menu 16 VLAN Setup ......................15-1 Figure 16-1 SNMP Management Model.......................16-1 Figure 16-2 Menu 22 SNMP Configuration ....................16-3 Figure 17-1 Menu 23 System Security ......................17-1...
  • Page 15 ZyAIR Access Point Series User’s Guide List of Tables Table 1-1 Model Specific Features......................... 1-1 Table 3-1 Wizard 1 : General Setup ....................... 3-2 Table 3-2 Wizard 2 : Wireless LAN Setup ..................... 3-4 Table 3-3 Private IP Address Ranges ......................3-5 Table 3-4 Wizard 3 : IP Address Assignment ....................
  • Page 16 ZyAIR Access Point Series User’s Guide Table 12-1 Menu 1 General Setup ........................12-2 Table 13-1 Menu 3.2 TCP/IP Setup ......................13-2 Table 13-2 Menu 3.5 Wireless LAN Setup ....................13-3 Table 13-3 Menu 3.5.1 WLAN MAC Address Filter..................13-7 Table 13-4 Menu 3.5.2 Roaming Configuration ...................13-8 Table 13-5 Menu 3.5.3 Multiple ESS Configuration ..................13-10...

  • Page 17: Preface

    ZyAIR Access Point Series User’s Guide Preface Congratulations on your purchase from the ZyAIR Access Point (AP) series. An AP acts as a bridge between the wireless and wired networks, extending your existing wired network without any additional wiring. Some features are not available in every model. Refer to the Model Specific Features table in Chapter 1 of this user’s guide to see what features are specific to...
  • Page 18 • The ZyAIR Access Point series may be referred to simply as the ZyAIR in the user’s guide. User Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications...

  • Page 19: Overview

    Overview OVERVIEW This part introduces the main features and applications of ZyAIR and shows how to access the web configurator and use the Wizard to configure for Internet Access.

  • Page 21: Chapter 1 Getting To Know Your Zyair

    ZyAIR. ZyAIR Features The following sections describe the features of the ZyAIR Access Point series. Features vary by ZyAIR model. This table lists the difference between models; it does not include features that are common to all of the ZyAIR models.

  • Page 22: Reset Button

    ZyAIR Access Point Series User’s Guide Table 1-1 Model Specific Features ZYAIR MODEL B-1000 B-1000 B-3000 FEATURES Power over Ethernet Bridge/Repeater AP & WDS (Wireless Distribution System) Support Concurrently Wi-Fi Protected Access (WPA) Rapid Spanning Tree Protocol (RSTP) Table Key: An “O” in a model’s column shows that the model has the specified feature. A number specific to an individual model may alternately be displayed.

  • Page 23: Figure 1-1 Poe Installation Example

    ZyAIR Access Point Series User’s Guide Bridge/Repeater A Bridge/Repeater link LED turns steady on green when your ZyAIR acts as a bridge, establishing up to six wireless links with other APs. It turns steady on orange when your ZyAIR acts as a repeater, establishing wireless links to two or more APs.
  • Page 24 ZyAIR Access Point Series User’s Guide IEEE 802.11b DATA RATE (MBPS) MODULATION DBPSK (Differential Binary Phase Shift Keyed) DQPSK (Differential Quadrature Phase Shift Keying 5.5 / 11 CCK (Complementary Code Keying) The ZyAIR may be prone to RF (Radio Frequency) interference from other 2.4 GHz devices such as microwave ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs.

  • Page 25: Figure 1-2 Wds Functionality Example

    ZyAIR Access Point Series User’s Guide SSL Passthrough SSL (Secure Sockets Layer) uses a public key to encrypt data that's transmitted over an SSL connection. Both Netscape Navigator and Internet Explorer support SSL, and many Web sites use the protocol to obtain confidential user information, such as credit card numbers.

  • Page 26: Applications For The Zyair

    ZyAIR Access Point Series User’s Guide SNMP SNMP (Simple Network Management Protocol) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP agent functionality, which allows a manger station to manage and monitor the ZyAIR through the network.

  • Page 27: Access Point

    ZyAIR Access Point Series User’s Guide OPERATING MODE ACCESS MULTIPLE BRIDGE/ AP+BRIDGE POINT REPEATER ZYAIR MODEL B-3000 Table Key: An “O” in a model’s column shows that the model has the specified feature. A number specific to an individual model may alternately be displayed. The information in this table was correct at the time of writing, although it may be subject to change.

  • Page 28: Ap + Bridge

    ZyAIR Access Point Series User’s Guide Station 1 relays communications via the ZyAIR within the Multi-ESS coverage area and with AP X if it moves to the RD ESS coverage area. Similarly, Station 2 relays communications via the ZyAIR within the Multi-ESS coverage area and with AP Y if it moves to the Sales ESS coverage area.

  • Page 29: Bridge / Repeater

    ZyAIR Access Point Series User’s Guide Figure 1-5 AP+Bridge Application 1.3.4 Bridge / Repeater The ZyAIR can act as a wireless network bridge and establish up to six wireless links with other APs. The repeater mode is the bridge mode without the Ethernet connection. When the ZyAIR is in the bridge mode, you need to enable STP to prevent bridge loops.

  • Page 30: Figure 1-6 Bridge Mode Application

    ZyAIR Access Point Series User’s Guide Figure 1-6 Bridge Mode Application Figure 1-7 Repeater Mode Application 1-10 Getting to Know Your ZyAIR...

  • Page 31: Chapter 2 Introducing The Web Configurator

    ZyAIR Access Point Series User’s Guide Chapter 2 Introducing the Web Configurator This chapter describes how to access the ZyAIR web configurator and provides an overview of its screens. The default IP address of the ZyAIR is 192.168.1.2. Accessing the ZyAIR Web Configurator Step 1.

  • Page 32: Resetting The Zyair

    ZyAIR Access Point Series User’s Guide The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the ZyAIR if this happens to you. Resetting the ZyAIR If you forget your password or cannot access the ZyAIR, you will need to reload the factory-default configuration file or use the RESET button on the top panel of the ZyAIR.

  • Page 33: Navigating The Zyair Web Configurator

    ZyAIR Access Point Series User’s Guide Navigating the ZyAIR Web Configurator We use the ZyAIR B-3000 web configurator in this guide as an example. The web configurator screens for your model may vary slightly for different ZyAIR models. The following summarizes how to navigate the web configurator from the MAIN MENU screen.

  • Page 35: Chapter 3 Wizard Setup

    ZyAIR Access Point Series User’s Guide Chapter 3 Wizard Setup This chapter provides information on the Wizard Setup screens in the web configurator. Wizard Setup Overview The web configurator’s setup wizard helps you configure your ZyAIR for wireless stations to access your wired LAN.

  • Page 36: Wizard Setup: General Setup

    ZyAIR Access Point Series User’s Guide Wizard Setup: General Setup General Setup contains administrative and system-related information. Figure 3-1 Wizard 1 : General Setup The following table describes the labels in this screen. Table 3-1 Wizard 1 : General Setup...

  • Page 37: Wizard Setup: Wireless Lan

    ZyAIR Access Point Series User’s Guide Table 3-1 Wizard 1 : General Setup LABEL DESCRIPTION Domain Name This is not a required field. Leave this field blank or enter the domain name here if you know Next Click Next to proceed to the next screen.

  • Page 38: Wizard Setup: Ip Address

    ZyAIR Access Point Series User’s Guide Table 3-2 Wizard 2 : Wireless LAN Setup LABEL DESCRIPTION Wireless LAN Setup ESSID Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the ZyAIR, make sure all wireless stations use the same ESSID in order to access the network.

  • Page 39: Ip Address Assignment

    ZyAIR Access Point Series User’s Guide 3.4.1 IP Address Assignment Every computer on the Internet must have a unique IP address. If your networks are isolated from the Internet, for instance, only between your two branch offices, you can assign any IP addresses to the hosts without problems.

  • Page 40: Figure 3-3 Wizard 3 : Ip Address Assignment

    ZyAIR Access Point Series User’s Guide The subnet mask specifies the network number portion of an IP address. Your ZyAIR will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the ZyAIR unless you are instructed to do otherwise.

  • Page 41: Basic Setup Complete

    ZyAIR Access Point Series User’s Guide Table 3-4 Wizard 3 : IP Address Assignment LABEL DESCRIPTION IP Address Enter the IP address of your ZyAIR in dotted decimal notation. If you changed the ZyAIR's IP address, you must use the new IP address if you want to access the web configurator again.
  • Page 42 ZyAIR Access Point Series User’s Guide Well done! You have successfully set up your ZyAIR to operate on your network and access the Internet. Wizard Setup...

  • Page 43: System, Wireless, Vlan And Ip

    System, Wireless, VLAN and IP Part II: SYSTEM, WIRELESS, VLAN AND IP This part covers the information and web configurator screens of System, Wireless, VLAN and IP.

  • Page 45: Chapter 4 System Screens

    ZyAIR Access Point Series User’s Guide Chapter 4 System Screens This chapter provides information on the System screens. System Overview This section provides information on general system setup. Configuring General Setup Click the SYSTEM link under ADVANCED to open the General screen.

  • Page 46: Configuring Password

    ZyAIR Access Point Series User’s Guide Table 4-1 System General Setup LABEL DESCRIPTION System Name Type a descriptive name to identify the ZyAIR in the Ethernet network. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-"...

  • Page 47: Configuring Time Setting

    ZyAIR Access Point Series User’s Guide Figure 4-2 Password The following table describes the labels in this screen. Table 4-2 Password LABEL DESCRIPTION Old Password Type in your existing system password (1234 is the default password). New Password Type your new system password (up to 31 characters). Note that as you type a password, the screen displays an asterisk (*) for each character you type.

  • Page 48: Figure 4-3 Time Setting

    ZyAIR Access Point Series User’s Guide Figure 4-3 Time Setting The following table describes the labels in this screen. Table 4-3 Time Setting LABEL DESCRIPTION Time Protocol Select the time service protocol that your time server sends when you turn on the ZyAIR.
  • Page 49 ZyAIR Access Point Series User’s Guide Table 4-3 Time Setting LABEL DESCRIPTION Time Server Enter the IP address or the URL of your time server. Check with your ISP/network Address administrator if you are unsure of this information. Current Time This field displays the time of your ZyAIR.

  • Page 51: Chapter 5 Wireless Configuration And Roaming

    ZyAIR Access Point Series User’s Guide Chapter 5 Wireless Configuration and Roaming This chapter discusses how to configure Wireless and Roaming screens on the ZyAIR. Some features such as Multiple-ESS and Bridge are not available on all models. Wireless LAN Overview This section introduces the wireless LAN (WLAN) and some basic scenarios.

  • Page 52: Ess

    ZyAIR Access Point Series User’s Guide Figure 5-2 Basic Service set 5.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS).

  • Page 53: Wireless Lan Basics

    ZyAIR Access Point Series User’s Guide Figure 5-3 Extended Service Set Wireless LAN Basics Refer also to the Wizard Setup chapter for more background information on Wireless LAN features, such as channels. 5.2.1 RTS/CTS A hidden node occurs when two stations are within range of the same access point, but are not within range of each other.

  • Page 54: Fragmentation Threshold

    ZyAIR Access Point Series User’s Guide Figure 5-4 RTS/CTS When station A sends data to the ZyAIR, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.

  • Page 55: Spanning Tree Protocol (Stp)

    ZyAIR Access Point Series User’s Guide If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size.

  • Page 56: How Stp Works

    ZyAIR Access Point Series User’s Guide On each bridge, the root port is the port through which this bridge communicates with the root. It is the port on this switch with the lowest path cost to the root (the root path cost). If there is no root port, then this bridge has been accepted as the root bridge of the spanning tree network.

  • Page 57: Access Point Mode

    ZyAIR Access Point Series User’s Guide 5.4.1 Access Point Mode Select Access Point Operating Mode to display the screen as shown next. Figure 5-5 Wireless The following table describes the general wireless LAN labels in this screen. System Screens...

  • Page 58: Table 5-3 Wireless

    ZyAIR Access Point Series User’s Guide Table 5-3 Wireless LABEL DESCRIPTION Operating Mode Select the operating mode from the drop-down list. Options are Access Point, Multiple ESS, Bridge/Repeater and AP+Bridge. The screen changes when you select Multiple ESS, Bridge/Repeater or AP+Bridge in this field.

  • Page 59: Multiple Ess Mode

    ZyAIR Access Point Series User’s Guide 5.4.2 Multiple ESS Mode Select Multiple ESS in the Operating Mode drop-down list box to display the screen. Refer to the chapter on Multiple ESS and VLAN for configuration and detailed information. You cannot configure WPA on your ZyAIR in Multiple ESS mode.

  • Page 60: Figure 5-7 Bridge Loop: Two Bridges Connected To Hub

    ZyAIR Access Point Series User’s Guide Figure 5-7 Bridge Loop: Two Bridges Connected to Hub If your ZyAIR (in bridge mode) is connected to a wired LAN while communicating with another wireless bridge that is also connected to the same wired LAN as shown next.

  • Page 61: Figure 5-9 Wireless : Bridge/Repeater

    ZyAIR Access Point Series User’s Guide Figure 5-9 Wireless : Bridge/Repeater The following table describes the bridge labels in this screen. System Screens 5-11...

  • Page 62: Ap+Bridge Mode

    ZyAIR Access Point Series User’s Guide Table 5-4 Wireless : Bridge/Repeater LABEL DESCRIPTION Operating Mode Select Bridge/Repeater in this field to display the screen as shown in Figure 5-9. This is the index number of the bridge connection. Active Select the check box to enable the bridge connection. Otherwise, clear the check box to disable it.

  • Page 63: Figure 5-10 Wireless : Ap+Bridge

    ZyAIR Access Point Series User’s Guide Figure 5-10 Wireless : AP+Bridge System Screens 5-13...

  • Page 64: Configuring Roaming

    ZyAIR Access Point Series User’s Guide Configuring Roaming A wireless station is a device with an IEEE 802.11b compliant wireless adapters. An access point (AP) acts as a bridge between the wireless and wired networks. An AP creates its own wireless coverage area. A wireless station can associate with a particular access point only if it is within the access point’s coverage...

  • Page 65: Requirements For Roaming

    ZyAIR Access Point Series User’s Guide Figure 5-11 Roaming Example The steps below describe the roaming process. Step 1. As wireless station Y moves from the coverage area of access point AP 1 to that of access point AP 2, it scans and uses the signal of access point AP 2.

  • Page 66: Figure 5-12 Roaming

    ZyAIR Access Point Series User’s Guide To enable roaming on your ZyAIR, click the WIRELESS link under ADVANCED and then the Roaming tab. The screen appears as shown. Figure 5-12 Roaming The following table describes the labels in this screen.

  • Page 67: Chapter 6 Wireless Security

    ZyAIR Access Point Series User’s Guide Chapter 6 Wireless Security This chapter describes how to use the MAC Filter, 802.1x, Local User Database and RADIUS to configure wireless security on your ZyAIR. Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless stations, access points and the wired network.

  • Page 68: Data Encryption

    ZyAIR Access Point Series User’s Guide 6.2.1 Data Encryption WEP provides a mechanism for encrypting data using encryption keys. Both the AP and the wireless stations must use the same WEP key to encrypt and decrypt data. Your ZyAIR allows you to configure up to four 64- bit or 128-bit WEP keys, but only one key can be enabled at any one time.

  • Page 69: Configuring Wep Encryption

    ZyAIR Access Point Series User’s Guide must then use the AP’s default WEP key to encrypt the challenge text and return it to the AP, which attempts to decrypt the message using the AP’s default WEP key. If the decrypted message matches the challenge text, the wireless station is authenticated.

  • Page 70: Figure 6-3 Wireless

    ZyAIR Access Point Series User’s Guide Figure 6-3 Wireless The following table describes the wireless LAN security labels in this screen. Wireless Security...

  • Page 71: Table 6-1 Wireless

    ZyAIR Access Point Series User’s Guide Table 6-1 Wireless LABEL DESCRIPTION Select Disable to allow wireless stations to communicate with the access points without Encryption any data encryption. Select 64-bit WEP or 128-bit WEP to enable data encryption. Select Auto, Open System or Shared Key from the drop-down list box.

  • Page 72: Mac Filter

    ZyAIR Access Point Series User’s Guide MAC Filter The MAC filter screen allows you to configure the ZyAIR to give exclusive access to up to 32 devices (Allow Association) or exclude up to 32 devices from accessing the ZyAIR (Deny Association). Every Ethernet device has a unique MAC (Media Access Control) address.

  • Page 73: Overview

    ZyAIR Access Point Series User’s Guide The following table describes the labels in this screen. Table 6-2 MAC Address Filter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC address filter table.

  • Page 74: Eap Authentication Overview

    ZyAIR Access Point Series User’s Guide RADIUS user is a simple package exchange in which your ZyAIR acts as a message relay between the wireless station and the network RADIUS server. Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: •...

  • Page 75: Dynamic Wep Key Exchange

    ZyAIR Access Point Series User’s Guide The following figure shows an overview of authentication when you specify a RADIUS server on your access point. Figure 6-5 EAP Authentication The details below provide a general description of how IEEE 802.1x EAP authentication works. For an example list of EAP-MD5 authentication steps, see the IEEE 802.1x appendix.

  • Page 76: Introduction To Wpa

    ZyAIR Access Point Series User’s Guide Introduction to WPA Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security specification draft. Key differences between WPA and WEP are user authentication and improved data encryption. 6.9.1 User Authentication WPA applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database.

  • Page 77: Wpa-Psk Application Example

    ZyAIR Access Point Series User’s Guide 6.10 WPA-PSK Application Example A WPA-PSK application looks as follows. Step 1. First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters (including spaces and symbols).

  • Page 78: Security Parameters Summary

    ZyAIR Access Point Series User’s Guide data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. Figure 6-7 WPA with RADIUS Application Example 6.12 Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type.

  • Page 79: Wireless Client Wpa Supplicants

    ZyAIR Access Point Series User’s Guide Table 6-3 Wireless Security Relational Matrix AUTHENTICATION ENCRYPTION ENTER IEEE 802.1X METHOD/ KEY METHOD MANUAL KEY MANAGEMENT PROTOCOL Open None Disable Open Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable Shared...

  • Page 80: Authentication Required: 802.1X

    ZyAIR Access Point Series User’s Guide Figure 6-8 Wireless LAN: 802.1x/WPA The following table describes the labels in this screen. Table 6-4 Wireless LAN: 802.1x/WPA LABEL DESCRIPTION Wireless Port To control wireless stations access to the wired network, select a control method from Control the drop-down list box.

  • Page 81: Figure 6-9 Wireless Lan: 802.1X/Wpa For 802.1X Protocol

    ZyAIR Access Point Series User’s Guide Figure 6-9 Wireless LAN: 802.1x/WPA for 802.1x Protocol The following table describes the labels in this screen. Table 6-5 Wireless LAN: 802.1x/WPA for 802.1x Protocol LABEL DESCRIPTION Wireless Port To control wireless stations access to the wired network, select a control method from Control the drop-down list box.
  • Page 82 ZyAIR Access Point Series User’s Guide Table 6-5 Wireless LAN: 802.1x/WPA for 802.1x Protocol LABEL DESCRIPTION ReAuthentication Specify how often wireless stations have to reenter usernames and passwords in Timer order to stay connected. This field is activated only when you select Authentication (In Seconds) Required in the Wireless Port Control field.

  • Page 83: Authentication Required: Wpa

    ZyAIR Access Point Series User’s Guide Table 6-5 Wireless LAN: 802.1x/WPA for 802.1x Protocol LABEL DESCRIPTION Authentication The authentication database contains wireless station login information. The local Databases user database is the built-in database on the ZyAIR. The RADIUS is an external server.

  • Page 84: Figure 6-10 Wireless Lan: 802.1X/Wpa For Wpa Protocol

    ZyAIR Access Point Series User’s Guide Figure 6-10 Wireless LAN: 802.1x/WPA for WPA Protocol The following table describes the labels not previously discussed Table 6-6 Wireless LAN: 802.1x/WPA for WPA Protocol LABEL DESCRIPTION Key Management Choose WPA in this field.

  • Page 85: Authentication Required: Wpa-Psk

    ZyAIR Access Point Series User’s Guide Table 6-6 Wireless LAN: 802.1x/WPA for WPA Protocol LABEL DESCRIPTION Group Data Group Data Privacy allows you to choose TKIP (recommended) or WEP for Privacy broadcast and multicast (“group”) traffic if the Key Management Protocol is WPA and WPA Mixed Mode is disabled.

  • Page 86: Figure 6-11 Wireless Lan: 802.1X/Wpa For Wpa-Psk Protocol

    ZyAIR Access Point Series User’s Guide Figure 6-11 Wireless LAN: 802.1x/WPA for WPA-PSK Protocol The following table describes the labels not previously discussed Table 6-7 Wireless LAN: 802.1x/WPA for WPA-PSK Protocol LABEL DESCRIPTION Key Management Choose WPA-PSK in this field.

  • Page 87: Configuring Local User Database

    ZyAIR Access Point Series User’s Guide Table 6-7 Wireless LAN: 802.1x/WPA for WPA-PSK Protocol LABEL DESCRIPTION WPA Mixed Mode The ZyAIR can operate in WPA Mixed Mode, which supports both clients running WPA and clients running dynamic WEP key exchange with 802.1x in the same Wi-Fi network.

  • Page 88: Figure 6-12 Local User Database

    ZyAIR Access Point Series User’s Guide Figure 6-12 Local User Database The following table describes the labels in this screen. 6-22 Wireless Security...

  • Page 89: Configuring Radius

    ZyAIR Access Point Series User’s Guide Table 6-8 Local User Database LABEL DESCRIPTION Active Select this check box to activate the user profile. User Name Enter the username (up to 31 characters) for this user profile. Password Type a password (up to 31 characters) for this user profile. Note that as you type a password, the screen displays a (*) for each character you type.

  • Page 90: Table 6-9 Radius

    ZyAIR Access Point Series User’s Guide The following table describes the labels in this screen. Table 6-9 RADIUS LABEL DESCRIPTION Authentication Server Active Select Yes from the drop-down list box to enable user authentication through an external authentication server. Select No to enable user authentication using the local user profile on the ZyAIR.

  • Page 91: Chapter 7 Multiple Ess And Vlan

    ZyAIR Access Point Series User’s Guide Chapter 7 Multiple ESS and VLAN This chapter is only applicable to the ZyAIR B-3000. Wireless LAN Infrastructures See the Wizard Setup and Wireless Configuration chapters for some basic WLAN scenarios and terminology. 7.1.1 Multiple ESS Traditionally, you needed different APs to configure different ESSs.

  • Page 92: Vlan

    ZyAIR Access Point Series User’s Guide VLAN A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network can belong to one or more groups. Only stations within the same group can talk to each other.

  • Page 93: Configuring Multiple Ess

    ZyAIR Access Point Series User’s Guide Figure 7-1 Multi-ESS with VLAN Example Configuring Multiple ESS Click the WIRELESS link under ADVANCED. Select Multiple ESS in the Operating Mode drop-down list box to display the screen as shown. Multiple ESS and VLAN...

  • Page 94: Figure 7-2 Wireless : Multiple Ess

    ZyAIR Access Point Series User’s Guide Figure 7-2 Wireless : Multiple ESS The following table describes the labels in this screen. Multiple ESS and VLAN...

  • Page 95: Edit Ess

    ZyAIR Access Point Series User’s Guide Table 7-1 Wireless : Multiple ESS LABEL DESCRIPTION Operating Mode Select Multiple ESS in this field to display the screen as shown in Figure 7-2. Choose Channel ID Set the operating frequency/channel depending on your particular region.

  • Page 96: Figure 7-3 Wireless : Edit Ess

    ZyAIR Access Point Series User’s Guide Figure 7-3 Wireless : Edit ESS The following table describes the labels in this screen. Table 7-2 Wireless : Edit ESS LABEL DESCRIPTION ESSID Enter a descriptive name (up to 32 alphanumeric characters) for identification purposes.

  • Page 97: Mac Filter Summary

    ZyAIR Access Point Series User’s Guide Table 7-2 Wireless : Edit ESS LABEL DESCRIPTION Key 1 or Key 2 Key 1 or key 2 is used to encrypt unicast transmissions. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").

  • Page 98: Configuring Vlan

    ZyAIR Access Point Series User’s Guide Figure 7-4 MAC Filter Summary The following table describes the labels in this screen. Table 7-3 MAC Filter Summary LABEL DESCRIPTION This is the index number of each ESS. ESSID This is the identification name of each ESS.

  • Page 99: Figure 7-5 Vlan

    ZyAIR Access Point Series User’s Guide Figure 7-5 VLAN The following table describes the labels in this screen. Table 7-4 VLAN LABEL DESCRIPTION Enable VLAN Tagging Select this check box to turn on VLAN tagging. Management VLAN ID Enter a number from 1 to 255 to define this VLAN group. At least one device in your network must belong to this VLAN group in order to manage the ZyAIR.

  • Page 101: Chapter 8 Ip Screen

    ZyAIR Access Point Series User’s Guide Chapter 8 IP Screen This chapter discusses how to configure IP on the ZyAIR Factory Ethernet Defaults The Ethernet parameters of the ZyAIR are preset in the factory with the following values: • IP address of 192.168.1.2 •...

  • Page 102: Configuring Ip

    ZyAIR Access Point Series User’s Guide Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space.
  • Page 103 ZyAIR Access Point Series User’s Guide Table 8-2 IP Setup LABEL DESCRIPTION IP Address Enter the IP address of your ZyAIR in dotted decimal notation. If you change the ZyAIR's IP address, you must use the new IP address if you want to access the web configurator again.

  • Page 105: Logs

    Logs Part III: LOGS This part provides information and configuration instructions for the logs.

  • Page 107: Chapter 9 Logs Screens

    ZyAIR Access Point Series User’s Guide Chapter 9 Logs Screens This chapter contains information about configuring general log settings and viewing the ZyAIR’s logs. Refer to the appendix for example log message explanations. Configuring View Log The web configurator allows you to look at all of the ZyAIR’s logs in one location.

  • Page 108: Configuring Log Settings

    ZyAIR Access Point Series User’s Guide The following table describes the labels in this screen. Table 9-1 View Log LABEL DESCRIPTION Display Select a log category from the drop down list box to display logs within the selected category. To view all logs, select All Logs.

  • Page 109: Figure 9-2 Log Settings

    ZyAIR Access Point Series User’s Guide Figure 9-2 Log Settings The following table describes the labels in this screen. Logs Screens...

  • Page 110: Table 9-2 Log Settings

    ZyAIR Access Point Series User’s Guide Table 9-2 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below. If this field is left blank, logs and alert messages will not be sent via e-mail.
  • Page 111 ZyAIR Access Point Series User’s Guide Table 9-2 Log Settings LABEL DESCRIPTION Clear log after sending Select the check box to clear all logs after logs and alert messages are sent via e- mail mail. Select the categories of logs that you want to record.

  • Page 113: Maintenance

    Maintenance Part IV: MAINTENANCE This part describes the Maintenance web configurator screens.

  • Page 115: Chapter 10 Maintenance

    ZyAIR Access Point Series User’s Guide Chapter 10 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 10.1 Maintenance Overview The maintenance screens can help you view system information, upload new firmware, manage configuration and restart your ZyAIR.

  • Page 116: System Statistics

    ZyAIR Access Point Series User’s Guide Table 10-1 System Status LABEL DESCRIPTION ZyNOS Firmware This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL's Version proprietary Network Operating System design. IP Address This is the Ethernet port IP address.

  • Page 117: Association List

    ZyAIR Access Point Series User’s Guide Table 10-2 System Status: Show Statistics LABEL DESCRIPTION Port This is the Ethernet or wireless port. Status This shows the port speed and duplex setting if you are using Ethernet encapsulation for the Ethernet port.

  • Page 118: Channel Usage

    ZyAIR Access Point Series User’s Guide Figure 10-3 Association List The following table describes the labels in this screen. Table 10-3 Association List LABEL DESCRIPTION This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station.

  • Page 119: Table 10-4 Channel Usage (Zyair B-1000)

    ZyAIR Access Point Series User’s Guide Figure 10-4 Channel Usage (ZyAIR B-1000) The following table describes the labels in this screen. Table 10-4 Channel Usage (ZyAIR B-1000) LABEL DESCRIPTION Channel This is the index number of the channel currently used by the associated AP in an Infrastructure wireless network or wireless station in an Ad-Hoc wireless network.

  • Page 120: Figure 10-5 Channel Usage

    ZyAIR Access Point Series User’s Guide Figure 10-5 Channel Usage The following table describes the labels in this screen. Table 10-5 Channel Usage LABEL DESCRIPTION SSID This is the Service Set IDentification name of the AP in an Infrastructure wireless network or wireless station in an Ad-Hoc wireless network.

  • Page 121: F/W Upload Screen

    ZyAIR Access Point Series User’s Guide 10.5 F/W Upload Screen Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, e.g., "zyair.bin". The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes.

  • Page 122: Figure 10-7 Firmware Upload In Process

    ZyAIR Access Point Series User’s Guide Figure 10-7 Firmware Upload In Process The ZyAIR automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 10-8 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the System Status screen.

  • Page 123: Configuration Screen

    ZyAIR Access Point Series User’s Guide Figure 10-9 Firmware Upload Error 10.6 Configuration Screen See the Firmware and Configuration File Maintenance chapter for transferring configuration files using FTP/TFTP commands. Click MAINTENANCE, and then the Configuration tab. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next.

  • Page 124: Backup Configuration

    ZyAIR Access Point Series User’s Guide Figure 10-10 Configuration 10.6.1 Backup Configuration Backup configuration allows you to back up (save) the ZyAIR’s current configuration to a file on your computer. Once your ZyAIR is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes.

  • Page 125: Restore Configuration

    ZyAIR Access Point Series User’s Guide 10.6.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your ZyAIR. Table 10-7 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it.

  • Page 126: Back To Factory Defaults

    ZyAIR Access Point Series User’s Guide Figure 10-12 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default ZyAIR IP address (192.168.1.2). See your Quick Installation Guide for details on how to set up your computer’s IP address.

  • Page 127: Restart Screen

    ZyAIR Access Point Series User’s Guide Figure 10-14 Reset Warning Message You can also press the RESET button on the top panel to reset the factory defaults of your ZyAIR. Refer to the section on resetting the ZyAIR for more information on the RESET button.

  • Page 129: Smt Configuration

    SMT Configuration Part V: SMT CONFIGURATION This part contains SMT (System Management Terminal) configuration and background information for features only configurable by SMT. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT.

  • Page 131: Chapter 11 Introducing The Smt

    ZyAIR Access Point Series User’s Guide Chapter 11 Introducing the SMT This chapter describes how to access the SMT and provides an overview of its menus 11.1 Connect to your ZyAIR Using Telnet The following procedure details how to telnet into your ZyAIR.

  • Page 132: Zyair Smt Menu Overview Example

    ZyAIR Access Point Series User’s Guide Menu 23.1 – System Security – Change Password Old Password= **** New Password= ? Retype to confirm= ? Enter here to CONFIRM or ESC to CANCEL: Figure 11-2 Menu 23.1 System Security : Change Password Step 4.

  • Page 133: Figure 11-3 Zyair B-3000 Smt Menu Overview Example

    ZyAIR Access Point Series User’s Guide ZyAIR B-3000 Main Menu Menu 22 Menu 16 Menu 14 Menu 1 Menu 3 Menu 23 SNMP Dial-in User Setup VLAN Setup General Setup LAN Setup System Security Configuration Menu 23.1 Menu14.1 Menu 3.2...

  • Page 134: Navigating The Smt Interface

    ZyAIR Access Point Series User’s Guide 11.4 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your ZyAIR. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below.

  • Page 135: System Management Terminal Interface Summary

    ZyAIR Access Point Series User’s Guide Copyright (c) 1994 - 2003 ZyXEL Communications Corp. ZyAIR B-3000 Main Menu Getting Started Advanced Management 1. General Setup 22. SNMP Configuration 3. LAN Setup 23. System Security 24. System Maintenance Advanced Applications 14. Dial-in User Setup 16.

  • Page 137: Chapter 12 General Setup

    ZyAIR Access Point Series User’s Guide Chapter 12 General Setup The chapter shows you the information on general setup. 12.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. It is recommended you type your computer's "Computer name".

  • Page 138: Table 12-1 Menu 1 General Setup

    ZyAIR Access Point Series User’s Guide Table 12-1 Menu 1 General Setup FIELD DESCRIPTION EXAMPLE System Name Choose a descriptive name for identification purposes. This name can B-3000 be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-”...

  • Page 139: Chapter 13 Lan Setup

    ZyAIR Access Point Series User’s Guide Chapter 13 LAN Setup This chapter shows you how to configure the LAN on your ZyAIR. 13.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup. From the main menu, enter 3 to display menu 3.

  • Page 140: Wireless Lan Setup

    ZyAIR Access Point Series User’s Guide Follow the instructions in the following table on how to configure the fields in this menu. Table 13-1 Menu 3.2 TCP/IP Setup FIELD DESCRIPTION EXAMPLE IP Address Press [SPACE BAR] and then [ENTER] to select Dynamic to have the Assignment ZyAIR obtain an IP address from a DHCP server.

  • Page 141: Figure 13-3 Menu 3.5 Wireless Lan Setup

    ZyAIR Access Point Series User’s Guide Menu 3.5 - Wireless LAN Setup Operating Mode= Access Point Edit MAC Address Filter= No ESSID= Wireless Edit Roaming Configuration= No Hide ESSID= No Edit Multiple ESS Configuration= N/A Channel ID= CH01 2412MHz Edit Bridge Link Configuration= N/A...
  • Page 142 ZyAIR Access Point Series User’s Guide Table 13-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE Select Disable to allow wireless stations to communicate with the access Disable Encryption points without any data encryption. Select 64-bit WEP or 128-bit WEP to enable data encryption.

  • Page 143: Configuring Mac Address Filter

    ZyAIR Access Point Series User’s Guide Table 13-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE Press [SPACE BAR] to select Yes or No and press [ENTER]. Block Intra-BSS Traffic Number of Enter the number of association stations. The number should be from 1 to...

  • Page 144: Figure 13-4 Menu 3.5 Wireless Lan Setup

    ZyAIR Access Point Series User’s Guide Menu 3.5 - Wireless LAN Setup Operating Mode= Access Point Edit MAC Address Filter= Yes ESSID= Wireless Edit Roaming Configuration= No Hide ESSID= No Edit Multiple ESS Configuration= N/A Channel ID= CH01 2412MHz Edit Bridge Link Configuration= N/A...

  • Page 145: Configuring Roaming

    ZyAIR Access Point Series User’s Guide Table 13-3 Menu 3.5.1 WLAN MAC Address Filter FIELD DESCRIPTION Active To enable MAC address filtering, press [SPACE BAR] to select Yes and press [ENTER]. Filter Action Define the filter action for the list of MAC addresses in the MAC address filter table.

  • Page 146: Figure 13-6 Menu 3.5 Wireless Lan Setup

    ZyAIR Access Point Series User’s Guide Menu 3.5 - Wireless LAN Setup Operating Mode= Access Point Edit MAC Address Filter= No Edit Roaming Configuration= Yes ESSID= Wireless Hide ESSID= No Edit Multiple ESS Configuration= N/A Channel ID= CH01 2412MHz Edit Bridge Link Configuration= N/A...

  • Page 147: Configuring Multiple Ess (For Zyair B-3000 Only)

    ZyAIR Access Point Series User’s Guide 13.3.3 Configuring Multiple ESS (for ZyAIR B-3000 only) Follow the steps below to configure Multiple ESS on your ZyAIR. Step 1. From the main menu, enter 3 to open Menu 3 – LAN Setup.

  • Page 148: Figure 13-9 Menu 3.5.3 Multiple Ess Configuration

    ZyAIR Access Point Series User’s Guide Menu 3.5.3 - Multiple ESS Configuration Number ESSID Active VLAN ID MAC Filter ------------------------------------------------------------------------------ Wireless Disable CSOB1000 Disable Disable Disable Disable Disable Disable Disable ------------------------------------------------------------------------------ WEP= 64-bit WEP Action= Edit ESS= 0 Press ENTER to Confirm or ESC to Cancel: Figure 13-9 Menu 3.5.3 Multiple ESS Configuration...

  • Page 149: Figure 13-10 Menu 3.5.3.1 Ess X Configuration

    ZyAIR Access Point Series User’s Guide Menu 3.5.3.1 - ESS 1 Configuration ESSID= Active= No Default Unicast Key= 1 Default Broadcast/Multicast Key= 3 Key 1= ******** Key 2= ******** Key 3= ******** Key 4= ******** VLAN ID= 0 Edit MAC Address Filter= No Press ENTER to Confirm or ESC to Cancel: Figure 13-10 Menu 3.5.3.1 ESS x Configuration...

  • Page 150: Configuring Bridge Link (For Zyair B-3000 Only)

    ZyAIR Access Point Series User’s Guide Table 13-6 Menu 3.5.3.1 ESS x Configuration FIELD DESCRIPTION Edit MAC Address Each service set has its own MAC address filter. Refer to MAC Address Filter section Filter for details. When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel”...

  • Page 151: Figure 13-12 Menu 3.5.4 Bridge Link Configuration

    ZyAIR Access Point Series User’s Guide Menu 3.5.4 - Bridge Link Configuration Enable Link 1= No Peer MAC Address= 00:00:00:00:00:00 Enable Link 2= No Peer MAC Address= 00:00:00:00:00:00 Enable Link 3= No Peer MAC Address= 00:00:00:00:00:00 Enable Link 4= No...

  • Page 153: Chapter 14 Dial-In User Setup

    ZyAIR Access Point Series User’s Guide Chapter 14 Dial-in User Setup This chapter shows you how to create user accounts on the ZyAIR. 14.1 Dial-in User Setup By storing user profiles locally, your ZyAIR is able to authenticate wireless users without interacting with a network RADIUS server.

  • Page 154: Table 14-1 Menu 14.1- Edit Dial-In User

    ZyAIR Access Point Series User’s Guide Table 14-1 Menu 14.1- Edit Dial-in User FIELD DESCRIPTION User Name Enter a username up to 31 alphanumeric characters long for this user profile. This field is case sensitive. Active Press [SPACE BAR] to select Yes and press [ENTER] to enable the user profile.

  • Page 155: Chapter 15 Vlan Setup

    ZyAIR Access Point Series User’s Guide Chapter 15 VLAN Setup This chapter explains VLAN Setup menu 16. Refer to the Multiple-ESS and VLAN chapter for background information on VLAN. This chapter is not available on all models. 15.1 VLAN Setup To setup VLAN, select option 16 from the main menu to open Menu 16 –...

  • Page 157: Chapter 16 Snmp Configuration

    ZyAIR Access Point Series User’s Guide Chapter 16 SNMP Configuration This chapter explains SNMP Configuration menu 22. 16.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP agent functionality, which allows a manager station to manage and monitor the ZyAIR through the network.

  • Page 158: Supported Mibs

    ZyAIR Access Point Series User’s Guide An agent is a management software module that resides in a managed device (the ZyAIR). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions.

  • Page 159: Snmp Traps

    ZyAIR Access Point Series User’s Guide Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 16-2 Menu 22 SNMP Configuration The following table describes the SNMP configuration parameters.

  • Page 160: Table 16-2 Snmp Traps

    ZyAIR Access Point Series User’s Guide Table 16-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION coldStart (defined in RFC-1215) A trap is sent after booting (power on). warmStart (defined in RFC-1215) A trap is sent after booting (software reboot). linkUp (defined in RFC-1215) A trap is sent when the port is up.

  • Page 161: Chapter 17 System Security

    ZyAIR Access Point Series User’s Guide Chapter 17 System Security This chapter describes how to configure the system security on the ZyAIR. 17.1 System Security You can configure the system password, an external RADIUS server and 802.1x in this menu.

  • Page 162: Figure 17-3 Menu 23.2 System Security : Radius Server

    ZyAIR Access Point Series User’s Guide Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Address= 10.11.12.13 Port #= 1812 Shared Secret= ? Accounting Server: Active= No Server Address= 10.11.12.13 Port #= 1813 Shared Secret= ? Press ENTER to Confirm or ESC to Cancel: Figure 17-3 Menu 23.2 System Security : RADIUS Server...

  • Page 163: Figure 17-4 Menu 23 System Security

    ZyAIR Access Point Series User’s Guide Table 17-1 Menu 23.2 System Security : RADIUS Server FIELD DESCRIPTION EXAMPLE Port The default port of the RADIUS server for accounting is 1813. 1813 You need not change this value unless your network administrator instructs you to do so with additional information.

  • Page 164: Figure 17-5 Menu 23.4 System Security : Ieee802.1X

    ZyAIR Access Point Series User’s Guide Menu 23.4 - System Security - IEEE802.1x Wireless Port Control= Authentication Required ReAuthentication Timer (in second)= 1800 Idle Timeout (in second)= 3600 Key Management Protocol= 802.1x Dynamic WEP Key Exchange= 128-bit WEP PSK = N/A...
  • Page 165 ZyAIR Access Point Series User’s Guide Table 17-2 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Idle Timeout The ZyAIR automatically disconnects a client from the wired network after a period of (in second) inactivity. The client needs to enter the username and password again before access to the wired network is allowed.
  • Page 166 ZyAIR Access Point Series User’s Guide Table 17-2 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Authentication The authentication database contains wireless station login information. The local user Databases database is the built-in database on the ZyAIR. The RADIUS is an external server. Use this field to decide which database the ZyAIR should use (first) to authenticate a wireless station.

  • Page 167: Chapter 18 System Information And Diagnosis

    ZyAIR Access Point Series User’s Guide Chapter 18 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software.

  • Page 168: Figure 18-2 Menu 24.1 System Maintenance : Status

    ZyAIR Access Point Series User’s Guide Menu 24.1 - System Maintenance - Status 00:57:47 Sat. Jan. 01, 2000 Port Status TxPkts RxPkts Cols Tx B/s Rx B/s Up Time 100M/Full 1092 2199 0:57:45 WLAN 0:57:45 Port Ethernet Address IP Address...

  • Page 169: System Information

    ZyAIR Access Point Series User’s Guide Table 18-1 Menu 24.1 System Maintenance : Status FIELD DESCRIPTION System Up Time This is the time the ZyAIR is up and running from the last reboot. 18.2 System Information To get to the System Information: Step 1.

  • Page 170: Console Port Speed

    Refers to the routing protocol used. ZyNOS F/W Refers to the ZyNOS (ZyXEL Network Operating System) system firmware version. Version ZyNOS is a registered trademark of ZyXEL Communications Corporation. Country Code Refers to the country code of the firmware. Ethernet Address Refers to the Ethernet MAC (Media Access Control) of your ZyAIR.

  • Page 171: Log And Trace

    ZyAIR Access Point Series User’s Guide 18.3 Log and Trace Your ZyAIR provides the error logs and trace records that are stored locally. 18.3.1 Viewing Error Log The first place you should look for clues when something goes wrong is the error log. Follow the procedures to view the local error/trace log: Step 1.

  • Page 172: Figure 18-8 Menu 24.4 System Maintenance : Diagnostic

    ZyAIR Access Point Series User’s Guide Menu 24.4 - System Maintenance – Diagnostic TCP/IP 1. Ping Host 2. DHCP Release 3. DHCP Renewal System 11. Reboot System Enter Menu Selection Number: Host IP Address= N/A Figure 18-8 Menu 24.4 System Maintenance : Diagnostic Follow the procedure next to get to display this menu: Step 1.

  • Page 173: Chapter 19 Firmware And Configuration File Maintenance

    ZyAIR Access Point Series User’s Guide Chapter 19 Firmware and Configuration File Maintenance This chapter tells you how to backup and restore your configuration file as well as upload new firmware and configuration files using the SMT screens. 19.1 Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password and TCP/IP Setup, etc.

  • Page 174: Backup Configuration

    ZyAIR Access Point Series User’s Guide Table 19-1 Filename Conventions FILE TYPE INTERNAL EXTERNAL DESCRIPTION NAME NAME Configuration File Rom-0 *.rom This is the configuration filename on the ZyAIR. Uploading the rom-0 file replaces the entire ROM file system, including your ZyAIR configurations, system-related data (including the default password), the error log and the trace log.

  • Page 175: Using The Ftp Command From The Dos Prompt

    ZyAIR Access Point Series User’s Guide 19.2.2 Using the FTP command from the DOS Prompt Step 1. Launch the FTP client on your computer. Step 2. Enter “open” and the IP address of your ZyAIR. Step 3. Press [ENTER] when prompted for a username.

  • Page 176: Backup Configuration Using Tftp

    ZyAIR Access Point Series User’s Guide Table 19-2 General Commands for Third Party FTP Clients COMMAND DESCRIPTION Initial Remote Specify the default remote directory (path). Directory Initial Local Specify the default local directory (path). Directory 19.2.3 Backup Configuration Using TFTP The ZyAIR supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN.

  • Page 177: Restore Configuration

    ZyAIR Access Point Series User’s Guide where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyAIR IP address, “get” transfers the file source on the ZyAIR (rom-0 name of the configuration file on the ZyAIR) to the file destination on the computer and renames it config.rom.

  • Page 178: Uploading Firmware And Configuration Files

    ZyAIR Access Point Series User’s Guide Menu 24.6 – Restore Configuration To transfer the firmware and the configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your router. Then type "root" and SMT password as requested.

  • Page 179: Firmware Upload

    ZyAIR Access Point Series User’s Guide 19.4.1 Firmware Upload FTP is the preferred method for uploading the firmware and configuration. To use this feature, your computer must have an FTP client. When you telnet into the ZyAIR, you will see the following screens for uploading firmware and the configuration file using FTP.

  • Page 180: Using The Ftp Command From The Dos Prompt Example

    ZyAIR Access Point Series User’s Guide Menu 24.7.2 - System Maintenance - Upload System Configuration File To upload the system configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested.

  • Page 181: Tftp File Upload

    ZyAIR Access Point Series User’s Guide 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 327680 bytes sent in 1.10Seconds 297.89Kbytes/sec.

  • Page 182: Example: Tftp Command

    ZyAIR Access Point Series User’s Guide 19.4.5 Example: TFTP Command The following is an example TFTP command: TFTP [-i] host put firmware.bin ras where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyAIR’s IP address, “put”...

  • Page 183: Chapter 20 System Maintenance And Information

    Backup Configuration Restore Configuration Upload Firmware Command Interpreter Mode 10. Time and Date Setting Enter Menu Selection Number: Figure 20-1 Menu 24 System Maintenance Copyright (c) 1994 - 2003 ZyXEL Communications Corp. B-3000> ? Valid commands are: exit device ether config...

  • Page 184: Time And Date Setting

    ZyAIR Access Point Series User’s Guide 20.2 Time and Date Setting The ZyAIR keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your ZyAIR. Menu 24.10 allows you to update the time and date settings of your ZyAIR.

  • Page 185: Resetting The Time

    ZyAIR Access Point Series User’s Guide Table 20-1 Menu 24.10 System Maintenance : Time and Date Setting FIELD DESCRIPTION Time Protocol Enter the time service protocol that your time server sends when you turn on the ZyAIR. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works.

  • Page 187: Appendices

    Appendices Part VI: APPENDICES This part provides troubleshooting and background information about setting up your computer’s IP address, wireless LAN, 802.1x and IP subnetting. It also provides information on the antenna, PoE, command interpreter interface and logs.

  • Page 189: Appendix A Troubleshooting

    ZyAIR Access Point Series User’s Guide Appendix A Troubleshooting This appendix covers potential problems and possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. Problems Starting Up the ZyAIR...

  • Page 190: Problems With The Password

    ZyAIR Access Point Series User’s Guide Chart A-2 Troubleshooting the Ethernet Interface PROBLEM CORRECTIVE ACTION I cannot ping any If the ETHN LED on the front panel is off, check the Ethernet cable connections computer on the between your ZyAIR and the Ethernet device.

  • Page 191: Problems With The Wlan Interface

    ZyAIR Access Point Series User’s Guide Problems with the WLAN Interface Chart A-5 Troubleshooting the WLAN Interface PROBLEM CORRECTIVE ACTION Cannot access the Make sure the wireless card is properly inserted in the ZyAIR and the link LED is on.

  • Page 193: Appendix B Brute-Force Password Guessing Protection

    ZyAIR Access Point Series User’s Guide Appendix B Brute-Force Password Guessing Protection The following describes the commands for enabling, disabling and configuring the brute-force password guessing protection mechanism for the password. See the Command Interpreter appendix for information on the command structure.

  • Page 195: Appendix C Setting Up Your Computer's Ip Address

    ZyAIR Access Point Series User’s Guide Appendix C Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.
  • Page 196 ZyAIR Access Point Series User’s Guide If you need the adapter: In the Network window, click Add. Select Adapter and then click Add. Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: In the Network window, click Add.
  • Page 197 ZyAIR Access Point Series User’s Guide Click the IP Address tab. -If your IP address is dynamic, select Obtain an IP address automatically. -If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields.
  • Page 198 ZyAIR Access Point Series User’s Guide Click the Gateway tab. -If you do not know your gateway’s IP address, remove previously installed gateways. -If you have a gateway IP address, type it in the New gateway field and click Add.
  • Page 199 ZyAIR Access Point Series User’s Guide For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. For Windows XP, click Network Right-click Local Area Connection and Connections. For Windows 2000/NT, click then click Properties. Network and Dial-up Connections.
  • Page 200 ZyAIR Access Point Series User’s Guide Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically.
  • Page 201 ZyAIR Access Point Series User’s Guide -If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: -In the IP Settings tab, in IP addresses, click Add.
  • Page 202 ZyAIR Access Point Series User’s Guide In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es),...
  • Page 203 ZyAIR Access Point Series User’s Guide Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Select Ethernet built-in from the Connect via list. For dynamically assigned settings, select Using DHCP Server from the Configure: list.
  • Page 204 ZyAIR Access Point Series User’s Guide For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your ZyAIR in the Router address box.
  • Page 205 ZyAIR Access Point Series User’s Guide Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list.
  • Page 207 ZyAIR Access Point Series User’s Guide Appendix D Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connection.
  • Page 208 ZyAIR Access Point Series User’s Guide unlicensed ISM (Industrial, Scientific and Medical) band. The third method is infrared technology, using very high frequencies, just below visible light in the electromagnetic spectrum to carry data. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless nodes or stations (STA), which is called a Basic Service Set (BSS).
  • Page 209 ZyAIR Access Point Series User’s Guide The Extended Service Set (ESS) shown in the next figure consists of a series of overlapping BSSs (each containing an Access Point) connected together by means of a Distribution System (DS). Although the DS could be any type of network, it is almost invariably an Ethernet LAN.

  • Page 211: Appendix E Wireless Lan With Ieee 802.1X

    ZyAIR Access Point Series User’s Guide Appendix E Wireless LAN With IEEE 802.1x As wireless networks become popular for both portable computing and corporate networks, security is now a priority. Security Flaws with IEEE 802.11 Wireless networks based on the original IEEE 802.11 have a poor reputation for safety. The IEEE 802.11b wireless access standard, first published in 1999, was based on the MAC address.
  • Page 212 ZyAIR Access Point Series User’s Guide RADIUS Server Authentication Sequence The following figure depicts a typical wireless network with a remote RADIUS server for user authentication using EAPOL (EAP Over LAN). Client computer access authorized. Client computer access not authorized.

  • Page 213: Appendix F Types Of Eap Authentication

    ZyAIR Access Point Series User’s Guide Appendix F Types of EAP Authentication This appendix discusses the four popular EAP authentication types: EAP-MD5, EAP-TLS, EAP-TTLS and PEAP. The type of authentication you use depends on the RADIUS server or the AP. Consult your network administrator for more information.
  • Page 214 ZyAIR Access Point Series User’s Guide hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5 and EAP- MSCHAPv2, for client authentication. For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, simple user name and password pair is more practical.

  • Page 215: Appendix G Power Over Ethernet Specifications

    ZyAIR Access Point Series User’s Guide Appendix G Power over Ethernet Specifications You can use a power over Ethernet injector to power this device. The injector must comply to IEEE 802.3af. Chart G-1 Power over Ethernet Injector Specifications Power Output 15.4 Watts maximum...

  • Page 217: Appendix H Antenna Selection And Positioning Recommendation

    ZyAIR Access Point Series User’s Guide Appendix H Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air.
  • Page 218 ZyAIR Access Point Series User’s Guide environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points. • Directional antennas concentrate the RF signal in a beam, like a flashlight. The angle of the beam width determines the direction of the coverage pattern;...
  • Page 219 ZyAIR Access Point Series User’s Guide Appendix I IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.

  • Page 220: Subnet Masks

    ZyAIR Access Point Series User’s Guide A class “A” address (24 host bits) can have 2 –2 hosts (approximately 16 million hosts). Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127.
  • Page 221 ZyAIR Access Point Series User’s Guide sequence of ones beginning from the left most bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
  • Page 222 ZyAIR Access Point Series User’s Guide Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The “borrowed” host ID bit can be either “0” or “1” thus giving two subnets;...
  • Page 223 ZyAIR Access Point Series User’s Guide to an actual host for the first subnet is 192.168.1.1 and the highest is 192.168.1.126. Similarly the host ID range for the second subnet is 192.168.1.129 to 192.168.1.254. Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets.
  • Page 224 ZyAIR Access Point Series User’s Guide Chart I-9 Subnet 3 NETWORK NUMBER LAST OCTET BIT VALUE Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.191 Highest Host ID: 192.168.1.190 Chart I-10 Subnet 4 NETWORK NUMBER...
  • Page 225 ZyAIR Access Point Series User’s Guide The following table is a summary for class “C” subnet planning. Chart I-12 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.255.128 (/25) 255.255.255.192 (/26) 255.255.255.224 (/27) 255.255.255.240 (/28)

  • Page 226: Appendix I Ip Subnetting

    ZyAIR Access Point Series User’s Guide Chart I-13 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.255.128 (/25) 255.255.255.192 1024 (/26) 255.255.255.224 2048 (/27) 255.255.255.240 4096 (/28) 255.255.255.248 8192 (/29) 255.255.255.252 16384 (/30) 255.255.255.254...

  • Page 227: Appendix J Command Interpreter

    ZyAIR Access Point Series User’s Guide Appendix J Command Interpreter The following describes how to use the command interpreter. Enter 24 in the main menu to bring up the system maintenance menu. Enter 8 to go to Menu 24.8 - Command Interpreter Mode. See the included disk or zyxel.com for more detailed information on these commands.

  • Page 229: Appendix K Log Descriptions

    ZyAIR Access Point Series User’s Guide Appendix K Log Descriptions Chart K-1 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is The router has adjusted its time based on information from the time server. successful Time calibration The router failed to get information from the time server.
  • Page 230 ZyAIR Access Point Series User’s Guide Chart K-2 ICMP Notes TYPE CODE DESCRIPTION Echo Reply Echo reply message Destination Unreachable Net unreachable Host unreachable Protocol unreachable Port unreachable A packet that needed fragmentation was dropped because it was set to Don't...

  • Page 231: Log Commands

    ZyAIR Access Point Series User’s Guide Chart K-2 ICMP Notes TYPE CODE DESCRIPTION Timestamp Timestamp request message Timestamp Reply Timestamp reply message Information Request Information request message Information Reply Information reply message Chart K-3 Sys log LOG MESSAGE DESCRIPTION Mon dd hr:mm:ss hostname This message is sent by the "RAS"...

  • Page 232: Displaying Logs

    ZyAIR Access Point Series User’s Guide Chart K-4 Log Categories and Available Settings LOG CATEGORIES AVAILABLE PARAMETERS error 0, 1, 2, 3 mten 0, 1 to not record logs for that category, to record only logs for that category, to record only alerts for that category, and to record both logs and alerts for that category.

  • Page 233: Appendix L Power Adaptor Specifications

    ZyAIR Access Point Series User’s Guide Appendix L Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adaptor Model AD48-1201200DUY Input Power AC120Volts/60Hz/0.25A Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards UL, CUL (UL 1950, CSA C22.2 No.234-M90) NORTH AMERICAN PLUG STANDARDS...
  • Page 234 ZyAIR Access Point Series User’s Guide JAPAN PLUG STANDARDS AC Power Adaptor Model JOD-48-1124 Input Power AC100Volts/ 50/60Hz/ 27VA Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards T-Mark (Japan Dentori) AUSTRALIA AND NEW ZEALAND PLUG STANDARDS AC Power Adaptor Model...

  • Page 235: Appendix M Index

    ZyAIR Access Point Series User’s Guide Appendix M Index DHCP ..............18-4 Diagnostic............. 18-6 Diagnostic Tools........... 18-1 Direct Sequence Spread Spectrum......D-2 Address Assignment.........3-5, 8-1 Distribution System ..........D-3 Ad-hoc Configuration..........D-2 DS...........See Distribution System Alternative Subnet Mask Notation ......I-3 DSSS ....See Direct Sequence Spread Spectrum Antenna Directional ............
  • Page 236 ZyAIR Access Point Series User’s Guide Network Topology With RADIUS Server ExampleE-2 Hidden Menus............11-4 Host .................4-3 Host IDs..............I-1 Packets ..............18-2 How STP Works............5-6 Password ..........4-2, 11-1, 16-2 Path cost..............5-5 Ping ............... 18-6 Power Specification ..........G-1 Private IP Address..........3-5, 8-1 IBSS.......
  • Page 237 ZyAIR Access Point Series User’s Guide Configuration ............16-2 Transport Layer Security ........ See TLS Get ..............16-2 Troubleshooting GetNext.............16-2 Accessing ZyAIR ........A-2, A-3 Manager ............16-2 Ethernet Port............A-1 MIBs ..............16-2 Password ............A-2 Set ..............16-2 Start-Up ..............A-1 Trap..............16-2 TTLS............... F-1 Traps ............16-3, 16-4 Tunneled Transport Layer Service....See TTLS...

This manual is also suitable for:

Zyair b-1000Zyair b-3000Zyair b-1000 v.2

Table of Contents