User Guide

ManualsBrandsZyXEL Communications ManualsNetwork RouterZYAIR B-2000

ZyAIR B-2000

Wireless LAN Gateway with 4-Port Switch

User's Guide

Version 3.50

October 2002

Summary of content (204 pages)

PAGE 1
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch User's Guide Version 3.
PAGE 2
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Copyright Copyright © 2002 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.
PAGE 3
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.
PAGE 4
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
PAGE 5
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Customer Support Please have the following information ready when you contact customer support. • • • • Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. METHOD E-MAIL SUPPORT/SALES TELEPHONE/FAX WEB SITE/ FTP SITE REGULAR MAIL LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 www.zyxel.com www.europe.zyxel.
PAGE 6
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table of Contents Copyright......................................................................................................................................................... ii Federal Communications Commission (FCC) Interference Statement.....................................................iii ZyXEL Limited Warranty ............................................................................................................................
PAGE 7
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 2.9.1 Dynamic DNS ..................................................................................................................2-13 2.9.2 Procedure To Configure Menu 1......................................................................................2-13 2.9.3 Procedure to Configure Dynamic DNS............................................................................2-14 2.10 WAN Setup ............................................................
PAGE 8
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 4.3.5 Configuring External RADIUS Server ..............................................................................4-6 4.4 Creating User Accounts on the ZyAIR ......................................................................................4-7 4.5 MAC Address Filtering..............................................................................................................4-8 Chapter 5 Remote Node Configuration ...............................
PAGE 9
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 7.6.1 Ethernet Traffic ................................................................................................................7-16 7.6.2 Remote Node Filters.........................................................................................................7-16 Chapter 8 SNMP Configuration .................................................................................................................8-1 8.1 About SNMP........................
PAGE 10
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 10.4.8 Uploading Firmware File Via Console Port...................................................................10-14 10.4.9 Example Xmodem Firmware Upload Using HyperTerminal ........................................10-14 10.4.10 Uploading Configuration File Via Console Port............................................................10-15 10.4.11 Example Xmodem Configuration Upload Using HyperTerminal..................................
PAGE 11
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch List of Figures Figure 1-1 Internet Access Application.......................................................................................................... 1-4 Figure 2-1 ZyAIR Front Panel ....................................................................................................................... 2-1 Figure 2-2 ZyAIR Side Panel and Connections .............................................................................................
PAGE 12
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 5-5 Sample Static Routing Topology...................................................................................................5-8 Figure 5-6 Menu 12.1 - IP Static Route Setup ................................................................................................5-8 Figure 5-7 Edit IP Static Route .......................................................................................................................
PAGE 13
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 8-2 Menu 22 – SNMP Configuration.................................................................................................. 8-3 Figure 9-1 Menu 24 - System Maintenance ................................................................................................... 9-1 Figure 9-2 Menu 24.1 – System Maintenance – Status.................................................................................. 9-2 Figure 9-3 Menu 24.
PAGE 14
PAGE 15
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch List of Tables Table 2-1 Front Panel LED Description......................................................................................................... 2-2 Table 1-2 ZyAIR Wireless LAN Coverage .................................................................................................... 2-5 Table 2-3 Main Menu Commands................................................................................................................
PAGE 16
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 9-3 System Maintenance Menu – Syslog Parameters ...........................................................................9-6 Table 9-4 System Maintenance Menu – Diagnostic .......................................................................................9-7 Table 10-1 Filename Conventions ................................................................................................................
PAGE 17
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Preface The ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch is the ideal all-in-one device for small networks connecting to the Internet via a cable/DSL modem. The ZyAIR is equipped with four auto-sensing 10/100BASE-T Ethernet ports to connect to your network and an RJ-45 port to connect to your ADSL service.
PAGE 18
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch The ZyXEL download library at www.zyxel.com contains additional support documentation. Please also refer to www.zyxel.com for an online glossary of networking terms. Syntax Conventions • “Type” means for you to type one or more characters and press the carriage return. “Select” or “Choose” means for you to use one predefined choices. • The SMT menu titles and labels are in Bold Times New Roman font. Predefined field choices are in Bold Arial font.
PAGE 19
Getting Started Part I: GETTING STARTED This part is structured as a step-by-step guide to help you connect, install and set up your ZyAIR to operate on your network and to access the Internet. Described are Key Features and Application, Hardware Installation, Initial Setup and Internet Access.
PAGE 20
PAGE 21
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 1 Getting To Know Your ZyAIR This chapter describes the key features and applications of your ZyAIR. 1.1 ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch The ZyAIR is a cost effective wireless LAN gateway with an integrated 10/100 Mbps and wireless interfaces and robust network management features for Internet access via an external cable/xDSL modem.
PAGE 22
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Wireless LAN MAC Address Filtering MAC Address Filtering together with ESSID (Extended Service Set IDentifier), WEP (Wired Equivalent Privacy) and IEEE 802.1x to ensure wireless network security. IEEE 802.1x for Network Security Your ZyAIR supports the IEEE 802.1x standard that works with the IEEE 802.11 to enhance user authentication.
PAGE 23
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch DHCP Support DHCP (Dynamic Host Configuration Protocol) allows the individual clients (computers) to obtain the TCP/IP configuration at start-up from a centralized DHCP server. The ZyAIR has built-in DHCP server capability enabled by default. It can assign IP addresses, an IP default gateway and DNS servers to DHCP clients.
PAGE 24
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch ♦ Wireless port Ease of Installation Your ZyAIR is designed for quick, intuitive and easy installation. Housing Your ZyAIR's all new compact and ventilated housing minimizes space requirements making it easy to position anywhere in your busy office. 1.3 Application for the ZyAIR 1.3.1 Broadband Internet Access via Cable or DSL modem.
PAGE 25
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 2 Hardware Installation and Initial Setup This chapter describes the physical features of the ZyAIR and how to make cable connections. 2.
PAGE 26
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 2-1 Front Panel LED Description LED COLOR STATUS LINK Green On The wireless card on the ZyAIR is working. Off The wireless card on the ZyAIR is not working. ZyAIR (WLAN ACK) Blue LAN 1-4 Green On (dim) Breathing On Blinking Orange Green Green 2-2 Green The ZyAIR is sending/receiving data. The ZyAIR has a successful 100Mb Ethernet connection. The ZyAIR is sending/receiving data.
PAGE 27
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 2.2 Side Panel and Connections of the ZyAIR The following figure shows the side panel of your ZyAIR. Figure 2-2 ZyAIR Side Panel and Connections 2.2.1 WAN Port Connecting the ZyAIR to a Cable Modem 1. Connect the WAN port on the ZyAIR to the Ethernet port on your cable modem using the Ethernet cable that came with your cable modem. The Ethernet port on a cable modem is sometimes labeled "PC" or "Workstation". 2.
PAGE 28
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch When the ZyAIR is on and properly connected to a computer or a hub, the corresponding LAN LED on the front panel turns on. 2.2.3 Console Port Use terminal emulator software on a computer for configuring your ZyAIR via the console port. Connect the 7-pin end of the supplied console cable to the console port of the ZyAIR and the 9-pin female end to a serial port (COM1, COM2 or other COM port) of your computer.
PAGE 29
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 1-2 ZyAIR Wireless LAN Coverage ≈11 Mbps ≤ 5.5 Mbps Indoor 50 m 80 m Outdoor 200 m 300 m ZyXEL offers several optional antennas to provide optimum coverage and performance for your ZyAIR. Refer to the Quick Start Guide for instructions to attach the antennas to your ZyAIR. 2.3 Hardware Mounting Options The ZyAIR may be placed on a flat surface or wall mounted.
PAGE 30
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 2.5 ZyAIR Configuration Configure your ZyAIR using: Web configurator SMT (System Management Terminal). Access the SMT via: o LAN or WAN using Telnet o Console port using terminal emulation software 2.5.1 Connect to Your ZyAIR Using the Web Configurator Step 1. Step 2. Step 3. Step 4. Make sure your computer IP address and the ZyAIR IP address are on the same subnet. Refer to the TCP/IP appendix. Launch your web browser and enter 192.168.1.
PAGE 31
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Please note that if there is no activity for longer than five minutes (default timeout period) after you log in, your ZyAIR will automatically log you out. The remainder of this user’s guide shows you how to configure the ZyAIR for Internet access using SMT screens through the console port. There are also some sections in this guide that focus on using Telnet to configure the ZyAIR. 2.5.
PAGE 32
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 2.6 Resetting the ZyAIR If you forget your password or cannot access the ZyAIR, you will need to reload the factory-default configuration file. Uploading this configuration file replaces the current configuration file with the factorydefault configuration file. This means that you will lose all configurations that you had previously; the password will be reset to “1234” and the LAN IP address to 192.168.1.1.
PAGE 33
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 2-5 ZyAIR SMT Menu Overview Hardware Installation and Initial Setup 2-9
PAGE 34
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 2.7 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your ZyAIR. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below. Table 2-3 Main Menu Commands OPERATION KEYSTROKE DESCRIPTION Move down to another menu [ENTER] To move forward to a submenu, type in the number of the desired submenu and press [ENTER].
PAGE 35
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Copyright (c) 1994 - 2002 ZyXEL Communications Corp. ZyAIR B-2000 Main Menu Getting Started 1. General Setup 2. WAN Setup 3. LAN Setup 4. Internet Access Setup Advanced Applications 11. Remote Node Setup 12. Static Routing Setup 14. Dial-in User Setup 15. NAT Setup Advanced Management 21. Filter Set Configuration 22. SNMP Configuration 23. System Password 24. System Maintenance 26. Schedule Setup 99.
PAGE 36
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 2-4 Main Menu Summary # MENU TITLE DESCRIPTION 24 System Maintenance This menu provides system status, diagnostics, software upload, etc. 26 Schedule Setup Use this menu to schedule outgoing calls. 99 Exit Use this to exit from SMT and return to a blank screen. 2.8 Changing the System Password Change the ZyAIR default password by following the steps shown next. Step 1.
PAGE 37
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch In Windows 2000 click Start, Settings, Control Panel and then double-click System. Click the Network Identification tab and then the Properties button. Note the entry for the Computer name field and enter it as the ZyAIR System Name. In Windows XP, click start, My Computer View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the ZyAIR System Name.
PAGE 38
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 2. Fill in the required fields. Refer to the table shown next for more information about these fields. Table 2-5 General Setup Menu Fields FIELD DESCRIPTION EXAMPLE System Name Choose a descriptive name for identification purposes. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted. ZyAIR Domain Name Enter the domain name (if you know it) here.
PAGE 39
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Follow the instructions in the next table to configure Dynamic DNS parameters. Table 2-6 Configure Dynamic DNS Menu Fields FIELD DESCRIPTION EXAMPLE Service Provider This is the name of your Dynamic DNS service provider. WWW.DynDNS.ORG (default) Active Press [SPACE BAR] to select Yes and then press [ENTER] to make dynamic DNS active. Yes DDNS Type Select the type of service that you are registered for from your Dynamic DNS service provider.
PAGE 40
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch From the main menu, enter 2 to display Menu 2-WAN Setup screen as shown. Menu 2 - WAN Setup MAC Address: Assigned By= Factory default IP Address= N/A Press ENTER to Confirm or ESC to Cancel: Figure 2-10 Menu 2 – WAN Setup The following table describes the fields in this screen. Table 2-7 WAN Setup Field Descriptions FIELD DESCRIPTION EXAMPLE Press [SPACE BAR] to select Factory default and press [ENTER] to use the factory assigned MAC address.
PAGE 41
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 3 - LAN Setup 1. LAN Port Filter Setup 2. TCP/IP and DHCP Setup 5. Wireless LAN Setup Enter Menu Selection Number: Figure 2-11 Menu 3 – LAN Setup Detailed explanation about the LAN Setup screens is given in the next chapter. 2.11.1 General Ethernet Port Filter Setup This menu allows you to specify filter set(s) that you wish to apply to the Ethernet traffic.
PAGE 42
PAGE 43
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 3 Internet Access This chapter shows you how to configure the LAN and WAN of your ZyAIR for Internet access. 3.1 Factory Ethernet Defaults The Ethernet parameters of the ZyAIR are preset in the factory with the following values: 1. Ethernet IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits). 2. DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
PAGE 44
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 3-1 LAN & WAN IPs 3.3 TCP/IP Parameters 3.3.1 IP Address and Subnet Mask Like houses on a street that share a common street name, the computers on a LAN share one common network number. Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
PAGE 45
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3.3.2 Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: 10.0.0.0 — 10.255.255.255 172.16.0.0 — 172.31.255.
PAGE 46
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3.3.4 DHCP Configuration DHCP (Dynamic Host Configuration Protocol) allows the individual clients (computers) to obtain the TCP/IP configuration at start-up from a centralized DHCP server. The ZyAIR has built-in DHCP server capability, enabled by default, which means it can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client.
PAGE 47
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3.4 IP Multicast Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender – 1 recipient) or Broadcast (1 sender – everybody on the network). Multicast is a third way to deliver IP packets to a group of hosts on the network - not everybody. IGMP (Internet Group Multicast Protocol) is a session-layer protocol used to establish membership in a multicast group - it is not used to carry user data.
PAGE 48
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup: DHCP= Server Client IP Pool Starting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server= 0.0.0.0 Secondary DNS Server= 0.0.0.0 Remote DHCP Server= N/A TCP/IP Setup: IP Address= 192.68.1.1 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-1 Multicast= None Edit IP Alias= No Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle.
PAGE 49
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 3-1 DHCP Ethernet Setup Menu Fields FIELD DESCRIPTION EXAMPLE Remote DHCP If Relay is selected in the DHCP field above then enter the IP Server address of the actual remote DHCP server here. Follow the instructions in the following table to configure TCP/IP parameters for the Ethernet port.
PAGE 50
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 3-3 Physical Network Figure 3-4 Partitioned Logical Networks Use menu 3.2.1 to configure IP Alias on your ZyAIR. 3.6.1 IP Alias Setup Use menu 3.2 to configure the first network. Move the cursor to Edit IP Alias field and press [SPACE BAR] to choose Yes and press [ENTER] to configure the second and third network. Menu 3.2 - TCP/IP and DHCP Setup DHCP Setup: DHCP= Server Client IP Pool Starting Addres= 192.168.1.
PAGE 51
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 3.2.1 - IP Alias Setup IP Alias 1= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A Incoming protocol filters= Outgoing protocol filters= IP Alias 2= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A Incoming protocol filters= Outgoing protocol filters= N/A N/A N/A N/A Enter here to CONFIRM or ESC to CANCEL: Figure 3-6 Menu 3.2.
PAGE 52
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3.7 Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyAIR supports the following methods. 3.7.1 Ethernet This encapsulation method is used when the WAN port is used as a regular Ethernet. 3.7.2 PPPoE Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection.
PAGE 53
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3.8 IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP. However the encapsulation method assigned influences your choices for IP Address. 3.9 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen.
PAGE 54
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3.10 Internet Access Setup From the main menu, type 4 to display Menu 4 – Internet Access Setup, as shown next.
PAGE 55
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 3-5 Internet Access Setup Menu Fields FIELD My Login My Password Login Server IP Address Assignment IP Address IP Subnet Mask Gateway IP Address Network Address Translation DESCRIPTION EXAMPLE Configure the My Login and My Password fields for PPP and PPPoE encapsulation only. Enter the login name that your ISP gives you.
PAGE 56
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch ESS ID Extended Service Set (ESS) is defined as one or more access points (APs) acting as a bridge between a wired LAN and the associated wireless clients. The ESS ID is a unique ID given to the APs and the wireless clients that participate in the same wireless network. You can think the EES ID as being similar to a workgroup name in a Microsoft network.
PAGE 57
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch notify all other stations to defer transmission. It will also confirm with the requesting station that the AP has reserved it for the time frame of the requested transmission. The RTS function will be activated if the packet size exceeds the value you set. It is highly recommended that you set the value ranging from 0 to 2432.
PAGE 58
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 3-6 Wireless LAN Setup Field Description FIELD DESCRIPTION EXMAPLE The ESSID (Extended Service Set IDentity) identifies the AP the wireless client is to associate to. Wireless clients associating to the AP must have the same ESSID. Enter a descriptive name up to 32 printable 7-bit ASCII characters.
PAGE 59
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch signal of a new access point, which then informs the access points on the LAN about the change. The new information is then propagated to the other access points on the LAN. An example is shown in Figure 3-10. If the roaming feature is not enabled on the access points, information is not communicated between the access points when a wireless station moves between coverage areas.
PAGE 60
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3. The adjacent access points should use different radio channels when their coverage areas overlap. 4. All access points must use the same port number to relay roaming information. 5. The access points must be connected to the Ethernet and be able to get IP addresses from a DHCP server if using dynamic IP address assignment. 3.11.5 Enable the Roaming Feature on the ZyAIR Enable the roaming feature if you have two or more ZyAIRs on the same subnet.
PAGE 61
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 3-7 Roaming Configuration Field Descriptions FIELD DESCRIPTION Active Press [SPACE BAR] and then [ENTER] to select Yes to allow roaming on the ZyAIR Press [SPACE BAR] and then [ENTER] to select Yes to enable roaming on the ZyAIR if you have two or more ZyAIRs on the same subnet.. Port # Enter the port number to communicate roaming information between access points. The port number must be the same on all access points. The default is 16290.
PAGE 62
Advanced Applications Part II: ADVANCED APPLICATIONS This part shows how to configure Wireless Security, Remote Node, Remote Node TCP/IP and NAT.
PAGE 63
PAGE 64
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 4 Wireless LAN Security Setup This chapter describes the types of security you can enable on the ZyAIR. 4.1 Levels of Security Wireless security is vital to your network to protect wireless communication between wireless clients, access points and other wireless. The figure below shows the possible wireless security levels on your ZyAIR. The highest security level is EAP (Extensible Authentication Protocol) authentication.
PAGE 65
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 1. From the main menu, enter 3 to display Menu 3 – Lan Setup. Step 2. Enter 5 to display Menu 3.5 – Wireless LAN Setup. Menu 3.5 - Wireless LAN Setup ESSID= 432545 Hide ESSID= No Channel ID= CH11 2462MHz RTS Threshold= 2432 Frag.
PAGE 66
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 4.3 Network Authentication Before a wireless client can communicate on your network through your ZyAIR, it must be authenticated by the ZyAIR or your network. 4.3.1 EAP EAP is an authentication protocol designed originally to run over PPP (Point-to-Point Protocol) frame in order to support multiple types of user authentication.
PAGE 67
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch • Access-Accept Sent by a RADIUS server allowing access. • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: • Accounting-Request Sent by the access point requesting accounting.
PAGE 68
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 5. The RADIUS server checks the user information against its user profile database and sends an “accept” or a “deny” packet to ZyAIR. Step 6. When ZyAIR receives the “accept” package, the client port is placed into an authorized state and traffic is allowed to proceed. Otherwise, no traffic is allowed. 4.3.4 Enable EAP Authentication on Your ZyAIR Follow the steps below to enable EAP authentication on your ZyAIR. Step 1.
PAGE 69
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 4-2 IEEE802.1X System Security Field Descriptions FIELD ReAuthentication Timer (in seconds) DESCRIPTION Specify the time interval between the RADIUS server’s authentication checks of wireless users connected to the network. This field is activated only when you select Auto authentication control. The default time interval is 1800 seconds.
PAGE 70
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 4-3 Menu 23.2 System Security - External Server Field Description FIELD DESCRIPTION Server Address Port EXAMPLE Enter the IP address of the external authentication server in dotted decimal notation. 10.11.12.13 The default port of the RADIUS server for authentication is 1812. 1812 You need not change this value unless your network administrator instructs you to do so with additional information.
PAGE 71
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 14 - Dial-in User Setup 1. 2. 3. 4. 5. 6. 7. 8. ________ ________ ________ ________ ________ ________ ________ ________ 9. 10. 11. 12. 13. 14. 15. 16. ________ ________ ________ ________ ________ ________ ________ ________ 17. 18. 19. 20. 21. 22. 23. 24. ________ ________ ________ ________ ________ ________ ________ ________ 25. 26. 27. 28. 29. 30. 31. 32.
PAGE 72
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Follow the steps below to create the MAC address table on your ZyAIR. Step 1. From the main menu, enter 3 to open Menu 3 – LAN Setup. Step 2. Enter 5 to display Menu 3.5 – Wireless LAN Setup. Menu 3.5 - Wireless LAN Setup ESSID= 432545 Hide ESSID= No Channel ID= CH11 2462MHz RTS Threshold= 2432 Frag.
PAGE 73
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 4-5 MAC Address Filter Field Description FIELD Active DESCRIPTION To enable MAC address filtering, press [SPACE BAR] to select Yes and press [ENTER]. Define the filter action for the list of MAC addresses in the MAC address filter table. Filter Action To deny access to the ZyAIR, press [SPACE BAR] to select Deny Association and press [ENTER]. MAC addresses not listed will be allowed to access the router.
PAGE 74
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 5 Remote Node Configuration This chapter shows you how to set up remote nodes on the WAN side. A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the network behind it across a WAN connection. When you use menu 4 to set up Internet access, you are configuring one of the remote nodes. 5.1 Remote Node Profile Use Menu 11-Remote Node Profile to setup the remote node.
PAGE 75
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 11.
PAGE 76
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 5-1 Remote Node Profile Menu Fields FIELD DESCRIPTION EXAMPLE Outgoing: My Login My Password Authen Type the login name assigned by your ISP when the ZyAIR calls this remote node. Type the password assigned by your ISP when the ZyAIR calls this remote node. This field sets the authentication protocol used for outgoing calls. Options for this field are: PAP CHAP/PAP – Your ZyAIR will accept either CHAP or PAP when requested by this remote node.
PAGE 77
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 5-1 Remote Node Profile Menu Fields FIELD DESCRIPTION EXAMPLE Period (hr) This field is the time period that the budget should be reset. For example, if we are allowed to call this remote node for a maximum of 10 minutes every hour, then the Allocated Budget is (10 minutes) and the Period (hr) is 1 (hour). 0 (default) Schedule This field is only applicable for PPPoE and PPPTP encapsulation. You can apply up to four schedule sets here.
PAGE 78
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Move the cursor to the Edit IP field, press [SPACE BAR] to select Yes, then press [ENTER] to display Menu 11.3 – Remote Node Network Layer Options shown below. Menu 11.3 - Remote Node Network Layer Options IP Address Assignment= Static Rem IP Addr= 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.
PAGE 79
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 5-2 Remote Node Network Layer Options FIELD DESCRIPTITON EXAMPLE Select SUA Only if you have just one public WAN IP address for your ZyAIR. The SMT uses Address Mapping Set 255 (menu 15.1 - see section 6.3.1). Select None to disable NAT. Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the cost measurement, with a minimum of 1 for directly connected networks.
PAGE 80
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= 1, 2, 3 device filters= Output Filter Sets: protocol filters= device filters= Enter here to CONFIRM or ESC to CANCEL: Figure 5-3 Menu 11.5 - Remote Node Filter (Ethernet Encapsulation ) Menu 11.
PAGE 81
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 5-5 Sample Static Routing Topology Configuration Step 1. To configure an IP static route, use Menu 12 - Static Route Setup as shwon next. Menu 12 - IP Static Route Setup 1. 2. 3. 4. 5. 6. 7. 8. ________ ________ ________ ________ ________ ________ ________ ________ Enter selection number: Figure 5-6 Menu 12.1 - IP Static Route Setup Step 2. 5-8 Now, type the route number of a static route you want to configure.
PAGE 82
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 12.1 - Edit IP Static Route Route #: 1 Route Name= ? Active= No Destination IP Address= ? IP Subnet Mask= ? Gateway IP Address= ? Metric= 2 Private= No Press ENTER to Confirm or ESC to Cancel: Figure 5-7 Edit IP Static Route The following table describes the fields for Menu 12.1 - Edit IP Static Route Setup.
PAGE 83
PAGE 84
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 6 Network Address Translation (NAT) This chapter discusses how to configure NAT on the ZyAIR. 6.1 Introduction NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 6.1.
PAGE 85
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 6.1.2 What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host.
PAGE 86
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 6-1 How NAT Works 6.1.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the ZyAIR can communicate with three distinct WAN networks. More examples follow at the end of this chapter.
PAGE 87
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 6-2 NAT Application With IP Alias 6.1.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: 1. One to One: In One-to-One mode, the ZyAIR maps one local IP address to one global IP address. 2. Many to One: In Many-to-One mode, the ZyAIR maps multiple local IP addresses to one global IP address.
PAGE 88
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 5. Server: This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world although, it is highly recommended that you use the DMZ port for these servers instead. Port numbers do not change for One-to-One and Many One-to-One NAT mapping types. The following table summarizes these types.
PAGE 89
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 6.2 Using NAT 6.2.1 SUA (Single User Account) Versus NAT SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to-One and Server. See section 6.3.1 for a detailed description of the NAT set for SUA. The ZyAIR also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types as outlined in Table 6-2. 1.
PAGE 90
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 11.3 - Remote Node Network Layer Options IP Address Assignment= Dynamic IP Address= N/A IP Subnet Mask= N/A Gateway IP Addr= N/A Network Address Translation= Full Feature Metric= 1 Private= N/A RIP Direction= None Version= N/A Multicast= None Enter here to CONFIRM or ESC to CANCEL: Figure 6-4 Menu 11.3 - Applying NAT to the Remote Node The following table describes the options for Network Address Translation.
PAGE 91
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 15 – NAT Setup 1. 2. Address Mapping Sets NAT Server Sets Enter Menu Selection Number: Figure 6-5 Menu 15 - NAT Setup 6.3.1 Address Mapping Sets Enter 1 to bring up Menu 15.1 – Address Mapping Sets. Menu 15.1 - Address Mapping Sets 1. 255. SUA (read only) Enter Menu Selection Number: Figure 6-6 Menu 15.1 - Address Mapping Sets SUA Address Mapping Set Enter 255 to display the next screen (see also Section 6.2.1).
PAGE 92
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 15.1.1 - Address Mapping Rules Set Name= SUA Idx --1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------0.0.0.0 Local End IP --------------255.255.255.255 Global Start IP --------------0.0.0.0 0.0.0.0 Global End IP --------------- Type -----M-1 Server Figure 6-7 Menu 15.1.255 - SUA Address Mapping Rules The following table explains the fields in this screen.
PAGE 93
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch User-Defined Address Mapping Sets Now let’s look at option 1 in menu 15.1. Enter 1 to bring up this menu. We’ll just look at the differences from the previous menu. Note the extra Action and Select Rule fields mean you can configure rules in this screen. Note also that the “?” in the Set Name field means that this is a required field and you must enter a name for the set. Menu 15.1.1 - Address Mapping Rules Set Name= ? Idx --1. 2 3. 4. 5. 6. 7. 8. 9. 10.
PAGE 94
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch You must press [ENTER] at the bottom of the screen to save the whole set. You must do this again if you make any changes to the set – including deleting a rule. No changes to the set take place until this action is taken. An End IP address must be numerically greater than its corresponding IP Start address. If the Set Name field is left blank, the entire set will be deleted. 6.3.2 Configuring Individual Rule In Menu 15.1.
PAGE 95
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch FIELD DESCRIPTION EXAMPLE This is the starting global IP address (IGA). If you have a dynamic IP, enter 0.0.0.0 as the Global IP Start. Note that Global IP Start can be set to 0.0.0.0 only if the types are Many-to-One or Server. 0.0.0.0 Global IP Start End Server Mapping Set This is the ending global IP address (IGA). This field is N/A for One-toOne, Many-to-One and Server types. N/A Only available when Type is set to Server.
PAGE 96
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP. The most often used port numbers are shown in the following table. Please refer to RFC 1700 for further information about port numbers.
PAGE 97
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------1. Default Default 0.0.0.0 2. 0 0 0.0.0.0 3. 0 0 0.0.0.0 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 6. 0 0 0.0.0.0 7. 0 0 0.0.0.0 8. 0 0 0.0.0.0 9. 0 0 0.0.0.0 10. 0 0 0.0.0.0 11. 0 0 0.0.0.0 12. 1027 1027 RR Reserved Press ENTER to Confirm or ESC to Cancel: Figure 6-10 Menu 15.2 - NAT Server Setup Step 3.
PAGE 98
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Figure 6-11 Multiple Servers Behind NAT Example NAT 6-15
PAGE 99
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 6.5 General NAT Examples 6.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (Inside Global Address) assigned by your ISP.
PAGE 100
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 6.5.2 Example 2: Internet Access with an Inside Server Figure 6-14 NAT Example 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and then go to menu 15.2 to specify the Inside Server behind the NAT as shown in the next figure. Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------1. Default Default 192.168.1.10 2. 0 0 0.0.0.0 3. 0 0 0.0.0.0 4.
PAGE 101
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 6.5.3 Example 3: Multiple Public IP Addresses With Inside Servers In this example, there are 3 IGAs from our ISP. There are many departments but two have their own FTP server. All departments share the same router. The example will reserve one IGA for each department with an FTP server and all departments use the other IGA. Map the FTP servers to the first two IGAs and the other LAN traffic to the remaining IGA.
PAGE 102
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 1. In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore you must choose the Full Feature option from the Network Address Translation field (in menu 4 or menu 11.3) as shown in the finger below. Menu 11.
PAGE 103
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 6. Repeat the previous step for rules 2 to 4 as outlined above. Step 7. When finished, menu 15.1.1 should look like as shown next. Menu 15.1.1 - Address Mapping Rules Set Name= Eample3 Idx --1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------192.168.1.10 192.168.1.11 0.0.0.0 Local End IP --------------255.255.255.255 Action= None Global Start IP --------------10.132.50.1 10.132.50.2 10.132.50.3 10.132.50.
PAGE 104
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 6.5.4 Example 4: NAT Unfriendly Application Programs Some applications do not support NAT Mapping using TCP or UDP port address translation. In this case it is better to use Many One-to-One mapping as port numbers do not change for Many One-to-One (and One-to-One) NAT mapping types. The following figure illustrates this.
PAGE 105
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch After you’ve configured your rule, you should be able to check the settings in menu 15.1.1 as shown next. Menu 15.1.1 - Address Mapping Rules Set Name= Example4 Idx --1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------192.168.1.10 Local End IP --------------192.168.1.12 Action= Edit Global Start IP --------------10.132.50.1 Global End IP --------------10.132.50.
PAGE 106
Advanced Management Part III: ADVANCED MANAGEMENT This part discusses Filtering, SNMP, System Information and Diagnosis, Firmware and Configuration File Maintenance, System Maintenance and Information, IP Policy Routing, Call Scheduling and Remote Management.
PAGE 107
PAGE 108
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 7 Filter Configuration This chapter shows you how to create and apply filters. 7.1 About Filtering Your ZyAIR uses filters to decide whether or not to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and protocol filters, which are discussed later.
PAGE 109
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Two sets of factory filter rules have been configured in menu 21 to prevent NetBIOS traffic from triggering calls. A summary of their filter rules is shown in the figures that follow. The following figure illustrates the logic flow when executing a filter rule.
PAGE 110
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch You can apply up to four filter sets to a particular port to block various types of packets. Because each filter set can have up to six rules, you can have a maximum of 24 rules active for a single port. For incoming packets, your ZyAIR applies data filters only. Packets are processed depending on whether a match is found. The following sections describe how to configure filter sets.
PAGE 111
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 21.1 - Filter Rules Summary # 1 2 3 4 5 6 A Y Y Y Y Y Y Type ---IP IP IP IP IP IP Filter Rules --------------------------------------------------------------Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138 Pr=17, SA=0.0.0.0, DA=0.0.0.
PAGE 112
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 7.2.1 Filter Rules Summary Menus The following tables briefly describe the abbreviations used in menus 21.1 and 21.2. Table 7-1 Abbreviations Used in the Filter Rules Summary Menu FIELD DESCRIPTION # The filter rule number: 1 to 6. A Active: “Y” means the rule is active. “N” means the rule is inactive. Type The type of filter rule: “GEN” for Generic, “IP” for TCP/IP. Filter Rules These parameters are displayed here. M More.
PAGE 113
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 7-2 Rule Abbreviations Used FILTER TYPE DESCRIPTION GEN 7.3 Off Offset Len Length Configuring a Filter Rule To configure a filter rule, type its number in Menu 21.1 – Filter Rules Summary and press [ENTER] to open menu 21.1.1 for the rule. There are two types of filter rules: TCP/IP and Generic. Depending on the type of rule, the parameters for each type will be different.
PAGE 114
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 137 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= Port # Comp= None TCP Estab= No More= No Log= None Action Matched= Drop Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel: Figure 7-7 Menu 21.1.
PAGE 115
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 7-3 TCP/IP Filter Rule Menu Fields FIELD IP Source Route DESCRIPTION EXAMPLE IP Source Route is an optional header that dictates the route an IP packet takes from its source to its destination. If Yes, the rule applies to any packet with an IP source route. The majority of IP packets do not have source route. No (default) Destination: IP address IP Addr Type the destination IP address of the packet you want to filter.
PAGE 116
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 7-3 TCP/IP Filter Rule Menu Fields FIELD DESCRIPTION Log EXAMPLE Select the logging option from the following: None – No packets will be logged. None Action Matched – Only packets that match the rule parameters will be logged. Action Not Matched – Only packets that do not match the rule parameters will be logged. Both – All packets will be logged. Action Matched Select the action for a matching packet.
PAGE 117
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Packet into IP Filter Filter Active? No Yes Apply SrcAddrMask to Src Addr Check Src IP Addr Not Matched Matched Apply DestAddrMask to Dest Addr Check Dest IP Addr Not Matched Matched Check IP Protocol Not Matched Matched Check Src & Dest Port Not Matched Matched More? Yes No Action Matched Drop Drop Packet Action Not Matched Check Next Rule Check Next Rule Drop Forward Forward Check Next Rule Accept Packet Figure 7-8 Executing an IP Fil
PAGE 118
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 7.3.2 Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. For generic rules, the ZyAIR treats a packet as a byte stream as opposed to an IP packet. You specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes.
PAGE 119
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 7-4 Generic Filter Rule Menu Fields FIELD DESCRIPTION EXAMPLE Offset Type the starting byte of the data portion in the packet that you want to compare. The range for this field is from 0 to 255. 0 (default) Length Type the byte count of the data portion in the packet that you want to compare. The range for this field is 0 to 8. 0 (default) Mask Type the mask (in Hexadecimal) to apply to the data portion before comparison.
PAGE 120
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch filters are applied to the raw packets that appear on the wire. They are applied at the point where the ZyAIR is receiving and sending the packets; for instance, the interface. The interface can be an Ethernet, or any other hardware port. The following figure illustrates this. Figure 7-10 Protocol and Device Filter Sets 7.5 Example Filter Let’s look at an example to block outside users from telnetting into the ZyAIR.
PAGE 121
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 3. Type a descriptive name or comment in the Edit Comments field (for example, TELNET_WAN) and press [ENTER]. Step 4. Press [ENTER] at the message “Press ENTER to confirm or ESC to cancel” to open Menu 21.3.1 – TCP/IP Filter Rule. Step 5. Type 1 to configure the first filter rule. Make the entries in this menu as shown next. Menu 21.3.1 - TCP/IP Filter Rule Select Yes to make the rule active.
PAGE 122
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 21.1 - Filter Rules Summary # 1 2 3 4 5 6 A Type Filter Rules M m n - ---- --------------------------------------------------------------- - - Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F N N N N N Enter Filter Rule Number (1-6) to Configure: 1 This shows you that you have configured and activated (A = Y) a TCP/IP filter rule (Type = IP, Pr = 6) for destination telnet ports (DP = 23). M = N means an action can be taken immediately.
PAGE 123
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 7.6.1 Ethernet Traffic You seldom need to filter Ethernet traffic; however, the filter sets may be useful to block certain packets, reduce traffic and prevent security breaches. Go to menu 3.1 (shown next) and type the number(s) of the filter set(s) that you want to apply as appropriate. You can choose up to four filter sets (from twelve) by typing their numbers separated by commas, for example, 3, 4, 6, 11.
PAGE 124
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 8 SNMP Configuration This chapter explains SNMP Configuration menu 22. SNMP is only available if TCP/IP is configured. 8.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP agent functionality, which allows a manager station to manage and monitor the ZyAIR through the network.
PAGE 125
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch An SNMP managed network consists of two main components: agents and a manager. An agent is a management software module that resides in a managed device (the ZyAIR). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices.
PAGE 126
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 8-2 Menu 22 – SNMP Configuration The following table describes the SNMP configuration parameters.
PAGE 127
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 8-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION 1 coldStart (defined in RFC-1215) A trap is sent after booting (power on). 2 warmStart (defined in RFC-1215) A trap is sent after booting (software reboot). 3 linkUp (defined in RFC-1215) A trap is sent with the port number. 4 authenticationFailure (defined in RFC-1215) A trap is sent to the manager when receiving any SNMP get or set requirements with wrong community (password).
PAGE 128
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 9 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Type 24 in the main menu to open Menu 24 - System Maintenance, as shown in the following figure. Menu 24 - System Maintenance 1. 2. 3. 4. 5. 6. 7. 8.
PAGE 129
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 24.1 - System Maintenance - Status Port WAN LAN WLAN Status 100M/Full 100M/Full 11M Port WAN LAN WLAN TxPkts 2138 1205 656 Ethernet Address 00:A0:C5:00:15:38 00:A0:C5:00:15:37 00:A0:C5:00:15:37 System up Time: RxPkts 0 1762 354 Cols 0 0 0 IP Address 0.0.0.0 192.168.1.1 04:27:14 Sat. Jan. 01, 2000 Tx B/s 0 0 0 Rx B/s 0 0 0 IP Mask 0.0.0.0 255.255.255.
PAGE 130
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 9.2 System Information To get to the System Information: Step 1. Enter 24 to display Menu 24 – System Maintenance. Step 2. Enter 2 to display Menu 24.2 – System Information and Console Port Speed. Step 3. From this menu you have two choices as shown in the next figure: Menu 24.2 - System Information and Console Port Speed 1. System Information 2. Console Port Speed Please enter selection: Figure 9-3 Menu 24.
PAGE 131
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 9-2 Fields in System Maintenance FIELD DESCRIPTION ZyNOS F/W Version Refers to the ZyNOS (ZyXEL Network Operating System) system firmware version. ZyNOS is a registered trademark of ZyXEL Communications Corporation. LAN Ethernet Address IP Address IP Mask DHCP Refers to the Ethernet MAC (Media Access Control) of your ZyAIR. This is the IP address of the ZyAIRe in dotted decimal notation. This shows the subnet mask of the ZyAIR.
PAGE 132
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 9.3.1 Viewing Error Log The first place you should look for clues when something goes wrong is the error log. Follow the procedures to view the local error/trace log: Step 1. Type 24 in the main menu to display Menu 24 – System Maintenance. Step 2. From menu 24, type 3 to display Menu 24.3 – System Maintenance – Log and Trace. Menu 24.3 - System Maintenance - Log and Trace 1. View Error Log 2. UNIX Syslog and Accounting 4.
PAGE 133
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 24.3.2 - System Maintenance - UNIX Syslog Syslog: Active= No Syslog IP Address= ? Log Facility= Local 1 Types: CDR= No Packet triggered= No Filter log= No PPP log= No Press ENTER to Confirm or ESC to Cancel: Figure 9-8 Menu 24.3.2 – System Maintenance – Syslog You need to configure the UNIX syslog parameters described in the following table to activate syslog and then choose what you want to log.
PAGE 134
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 9.3.3 Call-Triggering Packet Call-Triggering Packet displays information about the packet that triggered a dial-out call in an easy readable format. Equivalent information is available in menu 24.1 in hex format. 9.4 Diagnostic The diagnostic facility allows you to test the different aspects of your ZyAIR to determine if it is working properly. Menu 24.
PAGE 135
PAGE 136
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 10 Firmware and Configuration File Maintenance This chapter tells you how to back up and restore your configuration file as well as upload new firmware and a new configuration file. 10.1 Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc. It arrives from ZyXEL with a “rom” filename extension.
PAGE 137
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 10-1 Filename Conventions FILE TYPE INTERNAL NAME EXTERNAL NAME DESCRIPTION Configuration File Rom-0 This is the configuration filename on the ZyAIR. Uploading the rom-0 file replaces the entire ROM file system, including your ZyAIR configurations, systemrelated data (including the default password), the error log and the trace log. *.rom Firmware Ras This is the generic name for the ZyNOS firmware on the ZyAIR. *.bin 10.
PAGE 138
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 10.2.1 Backup Configuration Follow the instructions as shown in the next screen. Menu 24.5 - System Maintenance - Backup Configuration To transfer the configuration file to your workstation, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your router. Then type "root" and SMT password as requested. 3. Locate the 'rom-0' file. 4.
PAGE 139
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 10.2.3 Example of FTP Commands from the Command Line 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent in 1.10Seconds 297.89Kbytes/sec. ftp> quit Figure 10-2 FTP Session Example 10.2.4 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients.
PAGE 140
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 3. The IP address in the Secured Client IP field in menu 24.11 does not match the client IP. If it does not match, the ZyAIR will disconnect the Telnet session immediately. 4. You have an SMT console session running. 10.2.6 Backup Configuration Using TFTP The ZyAIR supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN.
PAGE 141
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 10-3 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the ZyAIR. 192.168.1.1 is the ZyAIR’s default IP address when shipped. Send/Fetch Use “Send” to upload the file to the ZyAIR and “Fetch” to back up the file on your computer. Local File Enter the path and name of the firmware file (*.bin extension) or configuration file (*.rom extension) on your computer.
PAGE 142
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 3. Run the HyperTerminal program by clicking Transfer, then Receive File as shown in the following screen. Type a location for storing the configuration file or click Browse to look for one. Choose the Xmodem protocol. Then click Receive. Figure 10-5 Backup Configuration Example Step 4. After a successful backup you will see the following screen. Press any key to return to the SMT menu. ** Backup Configuration completed. OK.
PAGE 143
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch WARNING! DO NOT INTERUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR ZYAIR. WHEN THE RESTORE CONFIGURATION PROCESS IS COMPLETE, THE ZYAIR WILL AUTOMATICALLY RESTART. 10.3.1 Restore Using FTP For details about backup using (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter. Menu 24.
PAGE 144
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 10.3.2 Restore Using FTP Session Example ftp> put config.rom rom-0 200 Port command okay 150 Opening data connection for STOR rom-0 226 File received OK 221 Goodbye for writing flash ftp: 16384 bytes sent in 0.06Seconds 273.07Kbytes/sec. ftp>quit Figure 10-8 Restore Using FTP Session Example Refer to section 10.2.5 to read about configurations that disallow TFTP and FTP over WAN. 10.3.
PAGE 145
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Type the configuration file’s location, or click Browse to search for it. Choose the Xmodem protocol. Then click Send. Figure 10-11 Restore Configuration Example Step 4. After a successful restoration you will see the following screen. Press any key to restart the ZyAIR and return to the SMT menu. Save to ROM Hit any key to start system reboot. Figure 10-12 Successful Restoration Confirmation Screen 10.
PAGE 146
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 24.7.1 - System Maintenance - Upload System Firmware To upload the system firmware, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested. 3. Type "put firmwarefilename ras" where "firmwarefilename" is the name of your firmware upgrade file on your workstation and "ras" is the remote file name on the system. 4.
PAGE 147
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 10.4.3 FTP File Upload Command from the DOS Prompt Example Step 1. Launch the FTP client on your computer. Step 2. Enter “open”, followed by a space and the IP address of your ZyAIR. Step 3. Press [ENTER] when prompted for a username. Step 4. Enter your password as requested (the default is “1234”). Step 5. Enter “bin” to set transfer mode to binary. Step 6.
PAGE 148
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Step 1. Use telnet from your computer to connect to the ZyAIR and log in. Because TFTP does not have any security checks, the ZyAIR records the IP address of the telnet client and accepts TFTP requests only from this address. Step 2. Put the SMT in command interpreter (CI) mode by entering 8 in Menu 24 – System Maintenance. Step 3. Enter the command “sys stdio 0” to disable the console timeout, so the TFTP transfer will not be interrupted.
PAGE 149
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 10.4.8 Uploading Firmware File Via Console Port Step 1. Select 1 from Menu 24.7 – System Maintenance – Upload Firmware to display Menu 24.7.1 – System Maintenance – Upload System Firmware, then follow the instructions as shown in the following screen. Menu 24.7.1 - System Maintenance - Upload System Firmware To 1. 2. 3. upload system firmware: Enter "y" at the prompt below to go into debug mode. Enter "atur" after "Enter Debug Mode" message.
PAGE 150
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 10.4.10Uploading Configuration File Via Console Port Step 1. Select 2 from Menu 24.7 – System Maintenance – Upload Firmware to display Menu 24.7.2 – System Maintenance – Upload System Configuration File. Follow the instructions as shown in the next screen. Menu 24.7.2 - System Maintenance - Upload System Configuration File To 1. 2. 3. upload system configuration file: Enter "y" at the prompt below to go into debug mode.
PAGE 151
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Type the configuration file’s location, or click Browse to search for it. Choose the Xmodem protocol. Then click Send. Figure 10-19 Example Xmodem Upload After the configuration upload process has completed, restart the ZyAIR by entering “atgo”.
PAGE 152
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 11 System Maintenance and Information This chapter leads you through SMT menus 24.8 to 24.11. 11.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the main system firmware. The CI provides much of the same functionality as the SMT, while adding some low-level setup and diagnostic functions. Enter the CI from the SMT by selecting menu 24.8. See the included disk or the zyxel.
PAGE 153
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 11.2 Time and Date Setting The ZyAIR keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your ZyAIR. Menu 24.10 allows you to update the time and date settings of your ZyAIR. The real time is then displayed in the ZyAIR error logs and firewall logs. Step 1. Select menu 24 in the main menu to open Menu 24 – System Maintenance. Step 2.
PAGE 154
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 11-1 Time and Date Setting Fields FIELD DESCRIPTION Time Server Address Enter the IP address or domain name of your time server. Check with your ISP/network administrator if you are unsure of this information. Current Time This field displays an updated time only when you reenter this menu. New Time Enter the new time in hour, minute and second format. Current Date This field displays an updated date only when you re-enter this menu.
PAGE 155
PAGE 156
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 12 Call Scheduling Call scheduling (applicable for PPPoE or PPTP encapsulation only) allows you to dictate when a remote node should be called and for how long. 12.1 Introduction The call scheduling feature allows the ZyAIR to manage a remote node and dictate when a remote node should be called and for how long. This feature is similar to the scheduler in a video cassette recorder (you can specify a time period for the VCR to record).
PAGE 157
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch To delete a schedule set, enter the set number and press [SPACE BAR] and then [ENTER] (or delete) in the Edit Name field. To setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 - Schedule Set Setup as shown next. Menu 26.
PAGE 158
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch FIELD Once: Date Weekday: Day DESCRIPTION EXAMPLE If you selected Once in the How Often field above, then enter the date the set should activate here in year-month-date format. 2000-01-01 If you selected Weekly in the How Often field above, then select the day(s) when the set should activate (and recur) by going to that day(s) and pressing [SPACE BAR] to select Yes, then press [ENTER].
PAGE 159
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Menu 11.1 - Remote Node Profile Rem Node Name= ChangeMe Active= Yes Route= IP Encapsulation= PPTP Service Type= Standard Service Name= N/A Outgoing: My Login= My Password= ******** Authen= CHAP/PAP PPTP: My IP Addr= My IP Mask= Server IP Addr= Connection ID/Name= Edit IP= No Telco Option: Allocated Budget(min)= 0 Period(hr)= 0 Schedules= 1,2,3,4 Nailed-Up Connection= No Apply your schedule sets here.
PAGE 160
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 13 Remote Management This chapter covers remote management (SMT menu 24.11). 13.1 Telnet You can configure your ZyAIR for remote Telnet access as shown next. Figure 13-1 Telnet Configuration on a TCP/IP Network 13.2 FTP You can upload and download ZyAIR firmware and configuration files using FTP. To use this feature, your computer must have an FTP client. 13.
PAGE 161
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 13.4.1 Remote Management Setup Remote management setup is for managing Telnet, FTP and Web services. You can customize the service port, access interface and the secured client IP address to enhance security and flexibility. You may manage your ZyAIR from a remote location via: the Internet (WAN only), the LAN only, All (LAN and WAN) or Disable (neither).
PAGE 162
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Table 13-1 Menu 24.11 -Remote Management Control FIELD Port DESCRIPTION EXAMPLE This field shows the port number for the remote management service. You may change the port number for a service if needed, but you must use the same port number to use that service for remote management. The DNS Service port number is 53. This cannot be changed. Access Select the access interface (if any) by pressing the [SPACE BAR].
PAGE 163
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 13.6 System Timeout There is a system timeout of five minutes (300 seconds) for Telnet/web/FTP connections. Your ZyAIR will automatically log you out if you do nothing in this timeout period, except when it is continuously updating the status in menu 24.1 or when sys stdio has been changed on the command line.
PAGE 164
Additional Information Part: IV ADDITIONAL INFORMATION This part contains Troubleshooting, Appendices and the Index.
PAGE 165
PAGE 166
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chapter 14 Troubleshooting This chapter covers potential problems and the corresponding remedies. 14.1 Problem Starting Up the ZyAIR Table 14-1 Troubleshooting the Start-Up of Your ZyAIR PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I plug in the power adapter. Make sure you are using the supplied power adapter and that it is plugged in to an appropriate power source. Check that the power source is turned on.
PAGE 167
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 14.3 Problem with the Ethernet Interface Table 14-3 Troubleshooting the Ethernet Interface PROBLEM Cannot access the ZyAIR from the Ethernet CORRECTIVE ACTION If the all the LAN LEDs on the front panel are off, check the Ethernet cable connection between your ZyAIR and the computer connected to the LAN port. Check the faulty Ethernet cables. Make sure the NIC (Network Interface Card) on the Ethernet device is installed and working properly.
PAGE 168
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 14.5 Problem with Internet Access Table 14-5 Troubleshooting the Internet Access PROBLEM I cannot access the Internet. CORRECTIVE ACTION Connect your cable/DSL modem with the ZyAIR using the appropriate cable. Check with the manufacturer of your cable/DSL device about your cable requirement because for some devices may require a crossover cable and others a straight-through Ethernet cable.
PAGE 169
PAGE 170
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix A Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without any expensive network cabling infrastructure. In effect a wireless LAN environment provides you the freedom to stay connected to the network while in the coverage area. Benefits of a Wireless LAN 1.
PAGE 171
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch wireless LAN connects a set of computers with wireless adapters. Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an Ad-hoc network or Independent Basic Service Set (IBSS). See the following diagram of an example of an Ad-hoc wireless LAN.
PAGE 172
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch could be any type of network, it is almost invariably an Ethernet LAN. Mobile nodes can roam between access points and seamless campus-wide coverage is possible. Diagram 2 ESS Provides Campus-Wide Coverage Wireless LAN and IEEE 802.
PAGE 173
PAGE 174
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix B Wireless LAN With IEEE802.1x As wireless networks become popular for both portable computing and corporate networks, security is now a priority. Security Flaws with IEEE 802.11 Wireless networks based on the original IEEE802.11 have a poor reputation for safety. The IEEE802.11b wireless access standard, first published in 1999, was based on the MAC address.
PAGE 175
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Client computer access authorized. Client computer access not authorized. Diagram 3 Sequences for EAP MD5-Challenge Authentication F Wireless LAN with IEEE 802.
PAGE 176
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix C Antenna Selection and Positioning Recommendation The access points in a wireless LAN send a radio frequency (RF) signal to the antennas, which propagate and capture the RF signal. Choosing the right antennas and positioning them properly increases the range and coverage area of a wireless LAN. Antenna Characteristics • Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11b) or 5GHz(IEEE 802.
PAGE 177
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch directional) to 90 degrees (very directional). The directional antennas are ideal for hallways and outdoor point-to-point applications. Positioning Antennas In general, antennas should be mounted as high as practically possible and free of obstructions. In point-to – point application, position both transmitting and receiving antenna at the same height and in a direct line of sight to each other to attend the best performance.
PAGE 178
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix D PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM PVC (Permanent Virtual Circuit) which connects to an xDSL Access Concentrator where the PPP session terminates (see the next figure). One PVC can support any number of PPP sessions from your LAN. PPPoE provides access control and billing functionality in a manner similar to dial-up services using PPP.
PAGE 179
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch How PPPoE Works The PPPoE driver makes the Ethernet appear as a serial link to the PC and the PC runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and an ISP, the AC is acting as a L2TP (Layer 2 Tunneling Protocol) LAC (L2TP Access Concentrator) and tunnels the PPP frames to the ISP. The L2TP tunnel is capable of carrying multiple PPP sessions.
PAGE 180
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix E PPTP What is PPTP? PPTP (Point-to-Point Tunneling Protocol) is a Microsoft proprietary protocol (RFC 2637 for PPTP is informational only) to tunnel PPP frames. How can we transport PPP frames from a PC to a broadband modem over Ethernet? A solution is to build PPTP into the ANT (ADSL Network Termination) where PPTP is used only over the short haul between the PC and the modem over Ethernet.
PAGE 181
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch PPTP Protocol Overview PPTP is very similar to L2TP, since L2TP is based on both PPTP and L2F (Cisco's Layer 2 Forwarding). Conceptually, there are three parties in PPTP, namely the PNS (PPTP Network Server), the PAC (PPTP Access Concentrator) and the PPTP user. The PNS is the box that hosts both the PPP and the PPTP stacks and forms one end of the PPTP tunnel. The PAC is the box that dials/answers the phone calls and relays the PPP frames to the PNS.
PAGE 182
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch PPP Data Connection The PPP frames are tunneled between the PNS and PAC over GRE (General Routing Encapsulation, RFC 1701, 1702). The individual calls within a tunnel are distinguished using the Call ID field in the GRE header.
PAGE 183
PAGE 184
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix F TCP/IP All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Use straight-through Ethernet cables to connect your computer's Ethernet adapter to a hub or switch and to connect the hub or switch to the ZyAIR's LAN port. Otherwise, connect your computer's Ethernet adapter directly to the LAN port with a crossover Ethernet cable.
PAGE 185
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch b. Select Client and then click Add. c. Select Microsoft from the list of manufacturers. d. Select Client for Microsoft Networks from the list of network clients and then click OK. e. Restart your computer so the changes you made take effect. Configuring TCP/IP 1. In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties. 2. Click the IP Address tab.
PAGE 186
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Setting up Your Windows NT/2000 Computer Configuring TCP/IP 1. Click Start, Settings, Network and Dial-up Connections and right-click Local Area Connection or the connection you want to configure and click Properties. 2. Select Internet Protocol (TCP/IP) (you may need to scroll down) and click Properties. 3. The Internet Protocol TCP/IP Properties window opens. -If your IP address is dynamic, click Obtain an IP address automatically.
PAGE 187
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch 4. The Internet Protocol TCP/IP Properties window opens. -If you have a dynamic IP address click Obtain an IP address automatically. -If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields.
PAGE 188
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Setting up Your Macintosh Computer Configuring TCP/IP Properties 1. Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. 2. Select Ethernet from the Connect via list. 3. For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box.
PAGE 189
PAGE 190
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix G IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes. The class of an address depends on the value of its first octet.
PAGE 191
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B” address has a valid range of 128 to 191. The first octet of a class “C” address begins with “110”, and therefore has a range of 192 to 223.
PAGE 192
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with mask 255.255.255.128.
PAGE 193
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after “borrowing”) determines the number of hosts you can have on each subnet. Chart 5 Subnet 1 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 0 IP Address (Binary) 11000000.10101000.00000001.
PAGE 194
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
PAGE 195
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chart 10 Subnet 4 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 192 IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.193 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 More Subnets Similarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110) and so on.
PAGE 196
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Chart 12 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 1 255.255.128.0 (/17) 2 32766 2 255.255.192.0 (/18) 4 16382 3 255.255.224.0 (/19) 8 8190 4 255.255.240.0 (/20) 16 4094 5 255.255.248.0 (/21) 32 2046 6 255.255.252.0 (/22) 64 1022 7 255.255.254.0 (/23) 128 510 8 255.255.255.0 (/24) 256 254 9 255.255.255.128 (/25) 512 126 10 255.255.255.192 (/26) 1024 62 11 255.
PAGE 197
PAGE 198
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Appendix H Power Adapter Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model AD48-1201200DUY Input Power AC120Volts/60Hz/0.25A Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards UL, CUL (UL 1950, CSA C22.2 No.234-M90) NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model DV-121A2-5720 Input Power AC120Volts/60Hz/27VA Output Power DC12Volts/1.
PAGE 199
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch JAPAN PLUG STANDARDS AC Power Adapter Model JOD-48-1124 Input Power AC100Volts/ 50/60Hz/ 27VA Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards T-Mark (Japan Dentori) AUSTRALIA AND NEW ZEALAND PLUG STANDARDS AC Power Adapter Model AD-1201200DS or AD-121200DS Input Power AC240Volts/50Hz/0.2A Output Power DC12Volts/1.
PAGE 200
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Index Back Panel connections description................................ 2-3 Backup ........................................................... 10-2 Basic Service Set.................................................A Benefits of PPPoE................................................ I BSS ..................................... See Basic Service Set Clear to Send protocol ................................... 3-14 Collision..................................
PAGE 201
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Dynamic Host Configuration Protocol ............ 3-4 Dynamic Service Selection............................ 3-10 DYNDNS Wildcard....................................... 2-13 E EAP.................................................................. 4-3 EAP Authentication Sequence......................... 4-4 Encapsulation................................. 3-10, 3-12, 5-1 Error Log .........................................................
PAGE 202
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Internet Access Setup....................................... 6-6 Internet Assigned Numbers Authority ..See IANA IP Address........................... 3-7, 5-9, 7-8, 9-4, 9-7 IP Address Assignment.................................. 3-11 IP Alias Setup .................................................. 3-8 IP Filter .......................................................... 7-10 Logic Flow................................................... 7-9 IP mask ......
PAGE 203
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch Transmission ............................................... 9-2 Related Documentation....................................xvii Remote Authentication Dial In User Service... See RADIUS Remote DHCP Server...................................... 3-7 Remote Management Limitations.................. 13-3 Remote Management Setup .................. 13-1, 13-2 Remote Node ............................................ 5-1, 9-2 Remote Node Profile .....................
PAGE 204
ZyAIR B-2000 Wireless LAN Gateway with 4-Port Switch TFTP Restrictions .......................................... 10-4 The Teledat Router as a PPPoE Client................. J Time and Date Setting.................................... 11-2 Time Server.................................................... 11-2 Time Zone...................................................... 11-3 To avoid damage to the ZyAIR........................ 2-4 Trace Records ..................................................