User Manual

ManualsBrandsSenao International ManualsElectronicsOutdoor Access Point

NOA-3570 User’s Guide

Chapter 12 Introducing the SMT 131

CHAPTER 12

Introducing the SMT

This chapter describes how to access the SMT and provides an overview of its menus.

12.1 Introduction to the SMT

The NOA-3570’s SMT (System Management Terminal) is a menu-driven interface that you

can access from a terminal emulator through the console port or over a telnet connection. This

chapter shows you how to access the SMT (System Management Terminal) menus, how to

navigate the SMT and how to configure SMT menus.

12.2 Accessing the SMT via the Console Port

Make sure you have the physical connection properly set up as described in the Quick Start

Guide.

When configuring using the console port, you need a computer equipped with

communications software configured to the following parameters:

• VT100 terminal emulation.

• 9600 Baud.

• No parity, 8 data bits, 1 stop bit, flow control set to none.

12.2.1 Initial Screen

When you turn on your NOA-3570, it performs several internal tests.

After the tests, the NOA-3570 asks you to press [ENTER] to continue, as shown next.

Summary of content (119 pages)

PAGE 1
NOA-3570 User’s Guide CHAPTER 12 Introducing the SMT This chapter describes how to access the SMT and provides an overview of its menus. 12.1 Introduction to the SMT The NOA-3570’s SMT (System Management Terminal) is a menu-driven interface that you can access from a terminal emulator through the console port or over a telnet connection. This chapter shows you how to access the SMT (System Management Terminal) menus, how to navigate the SMT and how to configure SMT menus. 12.
PAGE 2
NOA-3570 User’s Guide Figure 67 Initial Screen Bootbase Version: V1.03 | 08/30/2004 16:28:56 RAM:Size = 64 Mbytes FLASH: Intel 128M ZyNOS Version: V3.50(HV.0)b4 | 01/21/2005 14:25:43 Press any key to enter debug mode within 3 seconds. .......................................................... .. (Compressed) Version: NOA-3570, start: 5012c030 Length: 46312C, Checksum: 4F98 Compressed Length: 161B28, Checksum: ED83 Copyright (c) 1994 - 2005 ZyXEL Communications Corp.
PAGE 3
NOA-3570 User’s Guide 12.3 Accessing the SMT via Telnet The following procedure details how to telnet into your NOA-3570. 1 In Windows, click Start (usually in the bottom left corner), Run and then type “telnet 192.168.1.2” (the default IP address) and click OK. 2 For your first login, enter the default password “1234”. As you type the password, the screen displays an asterisk “*” for each character you type. Figure 69 Login Screen Password : xxxx 3 After entering the password you will see the main menu.
PAGE 4
NOA-3570 User’s Guide Table 43 Main Menu Commands NOA-3570 OPERATION KEYSTROKE DESCRIPTION Required fields or ChangeMe All fields with the symbol must be filled in order to be able to save the new configuration. All fields with ChangeMe must not be left blank in order to be able to save the new configuration. N/A fields Some of the fields in the SMT will show a . This symbol refers to an option that is Not Applicable.
PAGE 5
NOA-3570 User’s Guide Table 44 Main Menu Summary NOA-3570 # MENU TITLE DESCRIPTION 23 System Security Use this menu to change your password and enable network user authentication. 24 System Maintenance This menu provides system status, diagnostics, software upload, etc. 99 Exit Use this to exit from SMT and return to a blank screen. 12.4.2 SMT Menus Overview The following table gives you an overview of your NOA-3570’s various SMT menus.
PAGE 6
NOA-3570 User’s Guide 12.5 Changing the System Password Change the NOA-3570 default password by following the steps shown next. 1 From the main menu, enter 23 to display Menu 23 – System Security. 2 Enter 1 to display Menu 23.1 – System Security – Change Password as shown next. 3 Type your existing system password in the Old Password field, and press [ENTER]. Figure 71 Menu 23.1 System Security: Change Password Menu 23.
PAGE 7
NOA-3570 User’s Guide CHAPTER 13 General Setup The chapter shows you the information on general setup. 13.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. It is recommended you type your computer's "Computer name". The Domain Name entry is what is propagated to the DHCP clients on the LAN.
PAGE 8
NOA-3570 User’s Guide Fill in the required fields. Refer to the following table for more information about these fields. Table 46 Menu 1 General Setup FIELD DESCRIPTION System Name Choose a descriptive name for identification purposes. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted. Domain Name This is not a required field. Leave this field blank or enter the domain name here if you know it.
PAGE 9
NOA-3570 User’s Guide CHAPTER 14 LAN Setup This chapter shows you how to configure the LAN on your NOA-3570. 14.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup. From the main menu, enter 3 to display menu 3. Figure 73 Menu 3 LAN Setup Menu 3 - LAN Setup 2. TCP/IP Setup 5. Wireless LAN Setup Enter Menu Selection Number: 14.2 TCP/IP Ethernet Setup Use menu 3.2 to configure your NOA-3570 for TCP/IP. To edit menu 3.
PAGE 10
NOA-3570 User’s Guide Figure 74 Menu 3.2 TCP/IP Setup Menu 3.2 - TCP/IP Setup IP Address Assignment= Static IP Address= 192.168.1.2 IP Subnet Mask= 255.255.255.0 Gateway IP Address= 0.0.0.0 Follow the instructions in the following table on how to configure the fields in this menu. Table 47 Menu 3.2 TCP/IP Setup NOA-3570 FIELD DESCRIPTION IP Address Assignment Press [SPACE BAR] and then [ENTER] to select Dynamic to have the NOA-3570 obtain an IP address from a DHCP server.
PAGE 11
NOA-3570 User’s Guide Figure 75 Menu 3.5 Wireless LAN Setup Menu 3.5 - Wireless LAN Setup WLAN Adapter= WLAN 1 Operating Mode= Access Point Name (SSID)= ZyXEL Hide Name (SSID)= No Channel ID= CH06 2437MHz RTS Threshold= 2432 Frag. Threshold= 2432 WEP Encryption= Disable Default Key= N/A Key1= N/A Key2= N/A Key3= N/A Key4= N/A Authen. Method= N/A Edit MAC Address Filter= No Edit Roaming Configuration= No Edit Bridge Link Configuration= N/A Preamble= Long 802.11 Mode= Mixed Max.
PAGE 12
NOA-3570 User’s Guide Table 48 Menu 3.5 Wireless LAN Setup NOA-3570 FIELD DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the NOA-3570 and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP in the WEP Encryption field, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F"). If you chose 128-bit WEP in the WEP Encryption field, then enter 13 ASCII characters or 26 hexadecimal characters ("0-9", "A-F").
PAGE 13
NOA-3570 User’s Guide 14.3.1 Configuring MAC Address Filter Your NOA-3570 checks the MAC address of the wireless station device against a list of allowed or denied MAC addresses. However, intruders could fake allowed MAC addresses so MAC-based authentication is less secure than EAP authentication. Follow the steps below to create the MAC address table on your NOA-3570. 1 From the main menu, enter 3 to open Menu 3 – LAN Setup. 2 Enter 5 to display Menu 3.5 – Wireless LAN Setup. Figure 76 Menu 3.
PAGE 14
NOA-3570 User’s Guide Figure 77 Menu 3.5.1 WLAN MAC Address Filter Menu 3.5.
PAGE 15
NOA-3570 User’s Guide Figure 78 Menu 3.5 Wireless LAN Setup Menu 3.5 - Wireless LAN Setup Operating Mode= Access Point Name (SSID)= ZyXEL Hide Name (SSID)= No Channel ID= CH06 2437MHz RTS Threshold= 2432 Frag. Threshold= 2432 WEP Encryption= Disable Default Key= N/A Key1= N/A Key2= N/A Key3= N/A Key4= N/A Authen. Method= N/A Edit MAC Address Filter= No Edit Roaming Configuration= No Edit Bridge Link Configuration= N/A Preamble= Long 802.11 Mode= Mixed Max.
PAGE 16
NOA-3570 User’s Guide Table 50 Menu 3.5.2 - Roaming Configuration NOA-3570 FIELD DESCRIPTION Active Press [SPACE BAR] to select Yes from the drop-down list box to enable roaming on the NOA-3570 if you have two or more NOA-3570s on the same subnet. Note: All APs on the same subnet and the wireless stations must have the same SSID to allow roaming. Port Type the port number to communicate roaming information between access points. The port number must be the same on all access points.
PAGE 17
NOA-3570 User’s Guide 4 Move the cursor to the Edit Bridge Link Configuration field. Press [SPACE BAR] to select Yes and press [ENTER]. Menu 3.5.4 – Bridge Link Configuration displays as shown next. Figure 81 Menu 3.5.4 - Bridge Link Configuration Menu 3.5.
PAGE 18
NOA-3570 User’s Guide 148 Chapter 14 LAN Setup
PAGE 19
NOA-3570 User’s Guide CHAPTER 15 Dial-in User Setup This chapter shows you how to create user accounts on the NOA-3570. 15.1 Dial-in User Setup By storing user profiles locally, your NOA-3570 is able to authenticate wireless users without interacting with a network RADIUS server. Follow the steps below to set up user profiles on your NOA-3570. From the main menu, enter 14 to display Menu 14 - Dial-in User Setup. Figure 82 Menu 14- Dial-in User Setup Menu 14 - Dial-in User Setup 1. 2. 3. 4. 5. 6. 7. 8.
PAGE 20
NOA-3570 User’s Guide Table 52 Menu 14.1- Edit Dial-in User NOA-3570 FIELD DESCRIPTION User Name Enter a username up to 31 alphanumeric characters long for this user profile. This field is case sensitive. Active Press [SPACE BAR] to select Yes and press [ENTER] to enable the user profile. Password Enter a password up to 31 characters long for this user profile.
PAGE 21
NOA-3570 User’s Guide CHAPTER 16 VLAN Setup This chapter explains VLAN setup menu 16. Refer to the web configurator VLAN chapter for background information on VLAN. 16.1 VLAN Setup To setup VLAN, select option 16 from the main menu to open Menu 16 – VLAN Setup as shown next. Figure 84 Menu 16 VLAN Setup Menu 16 - VLAN Setup VLAN Tagging= Yes Native VLAN ID= 1 The following table describes the fields in this menu.
PAGE 22
NOA-3570 User’s Guide 152 Chapter 16 VLAN Setup
PAGE 23
NOA-3570 User’s Guide CHAPTER 17 SNMP Configuration This chapter explains SNMP Configuration menu 22. 17.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your NOA-3570 supports SNMP agent functionality, which allows a manager station to manage and monitor the NOA-3570 through the network. The NOA-3570 supports SNMP version one (SNMPv1) and version two c (SNMPv2c).
PAGE 24
NOA-3570 User’s Guide The managed devices contain object variables/managed objects that define each piece of information to be collected about a device. Examples of variables include the number of packets received, node port status etc. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. SNMP itself is a simple request/response protocol based on the manager/agent model.
PAGE 25
NOA-3570 User’s Guide Table 54 Menu 22 SNMP Configuration NOA-3570 FIELD DESCRIPTION SNMP: Get Community Type the Get Community, which is the password for the incoming Get- and GetNext requests from the management station. Set Community Type the Set Community, which is the password for incoming Set requests from the management station. Trusted Host If you enter a trusted host, your NOA-3570 will only respond to SNMP messages from this address.
PAGE 26
NOA-3570 User’s Guide 156 Chapter 17 SNMP Configuration
PAGE 27
NOA-3570 User’s Guide CHAPTER 18 System Security This chapter describes how to configure the system security on the NOA-3570. 18.1 System Security You can configure the system password, an external RADIUS server and 802.1x in this menu. 18.1.1 System Password Figure 87 Menu 23 System Security Menu 23 - System Security 1. Change Password 2. RADIUS Server 4. IEEE802.1x Enter Menu Selection Number: You should change the NOA-3570’s management password.
PAGE 28
NOA-3570 User’s Guide From Menu 23- System Security, enter 2 to display Menu 23.2 – System Security – RADIUS Server as shown next. Figure 89 Menu 23.2 System Security: RADIUS Server Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Address= 0.0.0.0 Port #= 1812 Shared Secret= ******** Accounting Server: Active= No Server Address= 0.0.0.0 Port #= 1813 Shared Secret= ******** Press ENTER to Confirm or ESC to Cancel: The following table describes the fields in this menu.
PAGE 29
NOA-3570 User’s Guide Table 57 Menu 23.2 System Security: RADIUS Server NOA-3570 FIELD DESCRIPTION Shared Secret Specify a password (up to 31 alphanumeric characters) as the key to be shared between the external accounting server and the access points. The key is not sent over the network. This key must be the same on the external accounting server and NOA-3570.
PAGE 30
NOA-3570 User’s Guide Figure 91 Menu 23.4 System Security: IEEE802.1x Menu 23.4 - System Security - IEEE802.1x Wireless Port Control= Authentication Required ReAuthentication Timer (in second)= 1800 Idle Timeout (in second)= 3600 Key Management Protocol= 802.1x Dynamic WEP Key Exchange= 128-bit WEP PSK= N/A WPA Mixed Mode= N/A WPA Group Key Update Timer= N/A Authentication Databases= Local User Database Only Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle.
PAGE 31
NOA-3570 User’s Guide Table 58 Menu 23.4 System Security: IEEE802.1x NOA-3570 FIELD DESCRIPTION Dynamic WEP Key Exchange This field is activated only when you select Authentication Required in the Wireless Port Control field. Also set the Authentication Databases field to RADIUS Only. Local user database may not be used. Select Disable to allow wireless stations to communicate with the access points without using Dynamic WEP Key Exchange. Select 64-bit WEP or 128-bit WEP to enable data encryption.
PAGE 32
NOA-3570 User’s Guide 162 Chapter 18 System Security
PAGE 33
NOA-3570 User’s Guide CHAPTER 19 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Type 24 in the main menu and press [ENTER] to open Menu 24 – System Maintenance, as shown in the following figure.
PAGE 34
NOA-3570 User’s Guide Figure 93 Menu 24.1 System Maintenance: Status Menu 24.1 - System Maintenance - Status Port Status Ethernet Down WLAN1 54M WLAN2 54M TxPkts 0 1161 1161 Port Ethernet Address Ethernet 00:A0:C5:62:B0:DB WLAN1 00:A0:C5:62:B0:DB WLAN2 00:A0:C5:62:B0:DC RxPkts 0 0 0 Cols 0 0 0 00:38:42 Sat. Jan. 01, 2000 Tx B/s 0 64 64 IP Address 192.168.1.2 Rx B/s 0 0 0 IP Mask 255.255.255.0 Up Time 0:00:00 0:38:40 0:38:40 DHCP None System up Time: 0:38:45 ZyNOS F/W Version: V3.50(HV.
PAGE 35
NOA-3570 User’s Guide 19.2 System Information To get to the System Information: 1 Enter 24 to display Menu 24 – System Maintenance. 2 Enter 2 to display Menu 24.2 – System Information and Console Port Speed. 3 From this menu you have two choices as shown in the next figure: Figure 94 Menu 24.2 System Information and Console Port Speed Menu 24.2 - System Information and Console Port Speed 1. System Information 2.
PAGE 36
NOA-3570 User’s Guide Table 60 Menu 24.2.1 System Maintenance: Information NOA-3570 FIELD DESCRIPTION Name Displays the system name of your NOA-3570. This information can be changed in Menu 1 – General Setup. Routing Refers to the routing protocol used. ZyNOS F/W Version Refers to the ZyNOS (ZyXEL Network Operating System) system firmware version. ZyNOS is a registered trademark of ZyXEL Communications Corporation. Country Code Refers to the country code of the firmware.
PAGE 37
NOA-3570 User’s Guide 19.3.1 Viewing Error Log The first place you should look for clues when something goes wrong is the error log. Follow the procedures to view the local error/trace log: 1 Type 24 in the main menu to display Menu 24 – System Maintenance. 2 From menu 24, type 3 to display Menu 24.3 – System Maintenance – Log and Trace. Figure 97 Menu 24.3 System Maintenance: Log and Trace Menu 24.3 - System Maintenance - Log and Trace 1. View Error Log Please enter selection: 3 Enter 1 from Menu 24.
PAGE 38
NOA-3570 User’s Guide Figure 99 Menu 24.4 System Maintenance: Diagnostic Menu 24.4 - System Maintenance - Diagnostic TCP/IP 1. Ping Host 2. DHCP Release 3. DHCP Renewal System 11. Reboot System Enter Menu Selection Number: Host IP Address= N/A Follow the procedure next to get to display this menu: 1 From the main menu, type 24 to open Menu 24 – System Maintenance. 2 From this menu, type 4. Diagnostic to open Menu 24.4 – System Maintenance – Diagnostic.
PAGE 39
NOA-3570 User’s Guide CHAPTER 20 Firmware and Configuration File Maintenance This chapter tells you how to backup and restore your configuration file as well as upload new firmware and configuration files using the SMT screens. 20.1 Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password and TCP/IP Setup, etc. It arrives from ZyXEL with a rom filename extension.
PAGE 40
NOA-3570 User’s Guide The following table is a summary. Please note that the internal filename refers to the filename on the NOA-3570 and the external filename refers to the filename not on the NOA-3570, that is, on your computer, local network or FTP site and so the name (but not the extension) will vary. After uploading new firmware see the ZyNOS F/W Version field in Menu 24.2.1 – System Maintenance – Information to confirm that you have uploaded the correct firmware version.
PAGE 41
NOA-3570 User’s Guide Figure 100 Menu 24.5 Backup Configuration Menu 24.5 – Backup Configuration To transfer the configuration file to your workstation, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your router. Then type "root" and SMT password as requested. 3. Locate the ‘rom-0’ file. 4. Type ‘get rom-0’ to back up the current router configuration to your workstation.
PAGE 42
NOA-3570 User’s Guide Figure 101 FTP Session Example 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 327680 bytes sent in 1.10Seconds 297.89Kbytes/sec. ftp> quit The following table describes some of the commands that you may see in third party FTP clients.
PAGE 43
NOA-3570 User’s Guide 3 Enter command “sys stdio 0” to disable the SMT timeout, so the TFTP transfer will not be interrupted. Enter command “sys stdio 5” to restore the five-minute SMT timeout (default) when the file transfer is complete. 4 Launch the TFTP client on your computer and connect to the NOA-3570. Set the transfer mode to binary before starting data transfer. 5 Use the TFTP client (see the example below) to transfer files between the NOA-3570 and the computer.
PAGE 44
NOA-3570 User’s Guide Figure 102 System Maintenance: Backup Configuration Ready to backup Configuration via Xmodem. Do you want to continue (y/n): 2 The following screen indicates that the Xmodem download has started. Figure 103 System Maintenance: Starting Xmodem Download Screen You can enter ctrl-x to terminate operation any time. Starting XMODEM download... 3 Run the HyperTerminal program by clicking Transfer, then Receive File as shown in the following screen.
PAGE 45
NOA-3570 User’s Guide 20.3.1 Restore Using FTP For details about backup using (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter. Figure 106 Menu 24.6 Restore Configuration Menu 24.6 – Restore Configuration To transfer the firmware and the configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your router. Then type "root" and SMT password as requested. 3.
PAGE 46
NOA-3570 User’s Guide 20.4.1 Firmware Upload FTP is the preferred method for uploading the firmware and configuration. To use this feature, your computer must have an FTP client. When you telnet into the NOA-3570, you will see the following screens for uploading firmware and the configuration file using FTP. Figure 108 Menu 24.7.1 System Maintenance: Upload System Firmware Menu 24.7.1 - System Maintenance - Upload System Firmware To upload the system firmware, follow the procedure below: 1.
PAGE 47
NOA-3570 User’s Guide To transfer the firmware and the configuration file, follow these examples: 20.4.3 Using the FTP command from the DOS Prompt Example 1 Launch the FTP client on your computer. 2 Enter “open” and the IP address of your NOA-3570. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested. The default is 1234. 5 Enter “bin” to set transfer mode to binary. 6 Use “put” to transfer files from the computer to the NOA-3570, e.g., put firmware.
PAGE 48
NOA-3570 User’s Guide 3 Enter the command “sys stdio 0” to disable the SMT timeout, so the TFTP transfer will not be interrupted. Enter command “sys stdio 5” to restore the five-minute SMT timeout (default) when the file transfer is complete. 4 Launch the TFTP client on your computer and connect to the NOA-3570. Set the transfer mode to binary before starting data transfer. 5 Use the TFTP client (see the example below) to transfer files between the NOA-3570 and the computer.
PAGE 49
NOA-3570 User’s Guide Figure 111 Menu 24.7.1 as Seen Using the Console Port Menu 24.7.1 - System Maintenance - Upload System Firmware To upload system firmware: 1. Enter "y" at the prompt below to go into debug mode. 2. Enter "atur" after "Enter Debug Mode" message. 3. Wait for "Starting XMODEM upload" message before activating Xmodem upload on your terminal. 4. After successful firmware upload, enter "atgo" to restart the router. Warning: Proceeding with the upload will erase the current system firmware.
PAGE 50
NOA-3570 User’s Guide Figure 113 Menu 24.7.2 as Seen Using the Console Port Menu 24.7.2 - System Maintenance - Upload System Configuration File To 1. 2. 3. upload system configuration file: Enter "y" at the prompt below to go into debug mode. Enter "atlc" after "Enter Debug Mode" message. Wait for "Starting XMODEM upload" message before activating Xmodem upload on your terminal. 4. After successful firmware upload, enter "atgo" to restart the system. Warning: 1.
PAGE 51
NOA-3570 User’s Guide CHAPTER 21 System Maintenance and Information This chapter leads you through SMT menus 24.8 and 24.10. 21.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the main system firmware. The CI provides much of the same functionality as the SMT, while adding some low-level setup and diagnostic functions. Enter the CI from the SMT by selecting menu 24.8. See the included disk or the zyxel.com web site for more detailed information on CI commands.
PAGE 52
NOA-3570 User’s Guide Figure 116 Valid CI Commands Copyright (c) 1994 - 2004 ZyXEL Communications Corp. NOA-3570> ? Valid commands are: sys exit ether wlan ip bridge certificates 8021x radius radserv NOA-3570> 21.2 Time and Date Setting The NOA-3570 keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your NOA-3570. Menu 24.10 allows you to update the time and date settings of your NOA3570.
PAGE 53
NOA-3570 User’s Guide Table 65 System Maintenance: Time and Date Setting NOA-3570 FIELD DESCRIPTION Time Protocol Enter the time service protocol that your time server sends when you turn on the NOA-3570. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works. The main differences between them are the format. Daytime (RFC 867) format is day/month/year/time zone of the server.
PAGE 54
NOA-3570 User’s Guide 184 Chapter 21 System Maintenance and Information
PAGE 55
NOA-3570 User’s Guide CHAPTER 22 Troubleshooting This appendix covers potential problems and possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. 22.1 Problems Starting Up the NOA-3570 Table 66 Troubleshooting the Start-Up of Your NOA-3570 The power injector’s Make sure the power cord is connected to an adequate power supply and that POWER and ACTIVE the power supply is turned on. LEDs are off.
PAGE 56
NOA-3570 User’s Guide 22.3 Problems with the Ethernet Interface Table 68 Troubleshooting the Ethernet Interface PROBLEM CORRECTIVE ACTION Cannot access the NOA-3570 from the LAN. If all of the LEDs on the inline power injector are on, check the Ethernet cable connection between your NOA-3570 and the computer connected to the DATA IN port on the inline power injector. Use a cross-over Ethernet cable to connect the power injector to a computer.
PAGE 57
NOA-3570 User’s Guide 22.4 Problems with the Password Table 69 Troubleshooting the Password PROBLEM CORRECTIVE ACTION I cannot access the NOA-3570. The Password and Username fields are case-sensitive. Make sure that you enter the correct password and username using the proper casing. If you forget your password or cannot access the NOA-3570, you will need to reload the factory-default configuration file.
PAGE 58
NOA-3570 User’s Guide 188 Chapter 22 Troubleshooting
PAGE 59
NOA-3570 User’s Guide APPENDIX A Specifications General Specifications Table 72 Device Specifications Default IP Address 192.168.1.2 Default Subnet Mask 255.255.255.0 (24 bits) Default Password 1234 Table 73 Performance NOA-3570 WLAN Connection Distance Appendix A Specifications IEEE 802.11g, up to 500 m IEEE 802.
PAGE 60
NOA-3570 User’s Guide Table 74 Firmware Features NOA-3570 190 System Management Embedded Web Configurator (HTTP) Menu-driven SMT (System Management Terminal) management CLI (Command Line Interpreter) Remote Management via Telnet or Web Diagnostic tool (built-in) SNMP Manageable Firmware Upgrade (web configurator, TFTP/FTP) RADIUS client Wireless IEEE 802.11b Compliant IEEE 802.11g Compliant Can support simultaneous IEEE 802.11b and IEEE 802.
PAGE 61
NOA-3570 User’s Guide Table 75 Environmental Conditions TEMPERATURE RANGE IN DEGREES CELSIUS Operation +15 ~ +35 Normal ~ +35 Extreme ~ +70 Storage -40 to +80 HUMIDITY (non-condensing): 5% to 95% RH (typical) Table 76 Inspection Channel (CH1, CH7, CH13) TX/RX FREQUENCY MHZ 1ST LO FREQUENCY MHZ CH1 2412 2038 CH7 2442 2068 CH13 2472 2098 2ND LO FREQUENCY MHZ VCO 748 IF 374 Hardware Specifications Table 77 Hardware Specifications NOA-3570 Ethernet Interface One MIL-C-5015 style Ethe
PAGE 62
Table 78 Radio Specifications NOA-3570 FREQUENCY BAND RADIO TYPE MODULATION TYPE CCK DQPSK DBPSK OPERATION CHANNELS North American (FCC) European Community (ETSI) RF OUTPUT POWER FCC (Excluding antenna gain) ETSI (Excluding antenna gain) BAND EDGE FCC ETSI 2.4 ~ 2.4835 (GHZ) Direct Sequence Spread Spectrum (DSSS)\ (Mbps) 11, 5.
PAGE 63
System Test Table 80 Transmitting System NOA-3570 PARAMETER Tx Power Spectrum Mask Frequency Error Power Ramp On Power Ramp Off Carrier Suppression Spurious Emission TEST CONDITION Modulation: OFDM Data Rate: 54 Mbps ±11MHz ~ 22MHz±22MHz ~ 33MHz Modulation: Carrier Only Tx power on 90% of Pmax Tx power off 10% of Pmax Modulation: Carrier Suppression 1 GHz ~ 16 GHz SPECIFICATION FCC:21 dBm ± 1 dB 21dBm ± 2 dB ETSI:14 dBm ± 1 dB 14dBm ± 2 dB < -30 dBr< -45 dBr TEMP. DEG. C.
PAGE 64
NOA-3570 User’s Guide Figure 118 Inspection Cosmetic and Function TEST ITEM TEST CONDITION CRITERIA Temp. High Temperature Storage Operation Test Spec. +70 Deg. C 24 hours Operation mode in the chamber The same as +25 Deg. C No Damage In Cosmetics or Error In Function Temp. Low Temperature Storage Operation Test Spec. -20 Deg. C 24 hours Operation mode in the chamber The same as +25 Deg. C No Damage In Cosmetics or Error In Function Temp. High Temperature Storage Storage Test +80 Deg.
PAGE 65
NOA-3570 User’s Guide Table 83 Approvals North America FCC Part 15 Class B EMI European Union (CE mark) EN55022 Class BEN61000-32EN61000-3-3 EMS European Union (CE mark) ELECTROSTATIC DISCHARGE EN61000-4-2 RADIO-FREQUENCY ELECTROMAGNETIC FIELD EN61000-4-3 EFT/BURST EN61000-4-4 SURGE EN61000-4-5 CONDUCTED SUSCEPTIBILITY EN61000-4-6 POWER MAGNETIC EN61000-4-8 VOLTAGE DIPS/ INTERRUPTION EN61000-4-11 EM FIELD FROM DIGITAL TELEPHONES ENV50204 LAN COMPATIBILITY SmartBit FCC Part15C, Sec15
PAGE 66
NOA-3570 User’s Guide APPENDIX C Power over Ethernet Specifications You can use a power over Ethernet injector to power this device. The injector must comply to IEEE 802.3af.-7 Table 86 Power over Ethernet Injector Specifications Power Output 15.
PAGE 67
NOA-3570 User’s Guide 200 Appendix C Power over Ethernet Specifications
PAGE 68
NOA-3570 User’s Guide APPENDIX D Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
PAGE 69
NOA-3570 User’s Guide Figure 119 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add.
PAGE 70
NOA-3570 User’s Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your computer so the changes you made take effect. Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • • If your IP address is dynamic, select Obtain an IP address automatically.
PAGE 71
NOA-3570 User’s Guide Figure 121 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • • If you do not know your gateway’s IP address, remove previously installed gateways. If you have a gateway IP address, type it in the New gateway field and click Add. 5 Click OK to save and close the TCP/IP Properties window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your NOA-3570 and restart your computer when prompted.
PAGE 72
NOA-3570 User’s Guide Figure 122 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 123 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties.
PAGE 73
NOA-3570 User’s Guide Figure 124 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 125 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). • 206 If you have a dynamic IP address click Obtain an IP address automatically.
PAGE 74
NOA-3570 User’s Guide • • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. Click Advanced. Figure 126 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK.
PAGE 75
NOA-3570 User’s Guide Figure 127 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields.
PAGE 76
NOA-3570 User’s Guide Figure 128 Windows XP: Internet Protocol (TCP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT). 11Turn on your NOA-3570 and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs, Accessories and then Command Prompt.
PAGE 77
NOA-3570 User’s Guide Figure 129 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 130 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
PAGE 78
NOA-3570 User’s Guide 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your NOA-3570 in the Router address box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration. 7 Turn on your NOA-3570 and restart your computer (if prompted).
PAGE 79
NOA-3570 User’s Guide Figure 132 Macintosh OS X: Network 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your NOA-3570 in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your NOA-3570 and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window.
PAGE 80
NOA-3570 User’s Guide APPENDIX E IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes. The class of an address depends on the value of its first octet. • Class “A” addresses have a 0 in the left most bit.
PAGE 81
NOA-3570 User’s Guide Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B” address has a valid range of 128 to 191. The first octet of a class “C” address begins with “110”, and therefore has a range of 192 to 223.
PAGE 82
NOA-3570 User’s Guide Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with mask 255.255.255.128.
PAGE 83
NOA-3570 User’s Guide Note: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after “borrowing”) determines the number of hosts you can have on each subnet. Table 93 Subnet 1NOA-3570 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 0 IP Address (Binary) 11000000.10101000.00000001.
PAGE 84
NOA-3570 User’s Guide Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
PAGE 85
NOA-3570 User’s Guide Table 98 Subnet 4NOA-3570 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 192 IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.193 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 Example Eight Subnets Similarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110).
PAGE 86
NOA-3570 User’s Guide Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A” address has three host ID octets (see Table 88 on page 213) available for subnetting. The following table is a summary for class “B” subnet planning. Table 101 Class B Subnet PlanningNOA-3570 NO.
PAGE 87
NOA-3570 User’s Guide 220 Appendix E IP Subnetting
PAGE 88
NOA-3570 User’s Guide Appendix F Wireless LAN Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless stations (A, B, C).
PAGE 89
NOA-3570 User’s Guide Figure 134 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood.
PAGE 90
NOA-3570 User’s Guide Figure 135 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a different channel than an adjacent AP (access point) to reduce interference. Interference occurs when radio signals from different access points overlap causing interference and degrading performance.
PAGE 91
NOA-3570 User’s Guide Figure 136 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations. RTS/CTS is designed to prevent collisions due to hidden nodes.
PAGE 92
NOA-3570 User’s Guide A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size.
PAGE 93
NOA-3570 User’s Guide IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features. It is supported by Windows XP and a number of network devices. Some advantages of IEEE 802.1x are: • User based identification that allows for roaming.
PAGE 94
NOA-3570 User’s Guide • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another AccessRequest message. The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting: • Accounting-Request Sent by the access point requesting accounting.
PAGE 95
NOA-3570 User’s Guide 3 The wireless station replies with identity information, including username and password. 4 The RADIUS server checks the user information against its user profile database and determines whether or not to authenticate the wireless station. Types of Authentication This section discusses some popular authentication types: EAP-MD5, EAP-TLS, EAPTTLS, PEAP and LEAP. The type of authentication you use depends on the RADIUS server or the AP.
PAGE 96
NOA-3570 User’s Guide PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco.
PAGE 97
NOA-3570 User’s Guide Figure 138 WEP Authentication Steps Open system authentication involves an unencrypted two-message procedure. A wireless station sends an open system authentication request to the AP, which will then automatically accept and connect the wireless station to the network. In effect, open system is not authentication at all as any station can gain access to the network. Shared key authentication involves a four-message procedure.
PAGE 98
NOA-3570 User’s Guide Note: EAP-MD5 cannot be used with Dynamic WEP Key Exchange For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, a simple user name and password pair is more practical. The following table is a comparison of the features of authentication types.
PAGE 99
NOA-3570 User’s Guide The Message Integrity Check (MIC) is designed to prevent an attacker from capturing data packets, altering them and resending them. The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not match, it is assumed that the data has been tampered with and the packet is dropped.
PAGE 100
NOA-3570 User’s Guide In a network environment with multiple access points, wireless stations are able to switch from one access point to another as they move between the coverage areas. This is roaming. As the wireless station moves from place to place, it is responsible for choosing the most appropriate access point depending on the signal strength, network utilization or other factors.
PAGE 101
NOA-3570 User’s Guide Requirements for Roaming The following requirements must be met in order for wireless stations to roam between the coverage areas. 1 All the access points must be on the same subnet and configured with the same ESSID. 2 If IEEE 802.1x user authentication is enabled and to be done locally on the access point, the new access point must have the user profile for the wireless station. 3 The adjacent access points should use different radio channels when their coverage areas overlap.
PAGE 102
NOA-3570 User’s Guide APPENDIX G Outdoor Site Planning This appendix provides information on site planning requirements for the installation of your outdoor wireless device. Introduction The installation of a wireless network requires some additional planning over a wired network. This planning includes RF (Radio Frequency) path planning, site preparation, and installation of outdoor components such as outdoor units, antennas, lightning protection devices, and cabling suitable for outdoor conditions.
PAGE 103
NOA-3570 User’s Guide Specific Considerations The following information will help you determine site characteristics that are most applicable to your outdoor wireless device and the actions that should be taken. Weather It is important to research any unusual weather conditions that are common to the site location. These conditions include extreme • • • • Rainfall Fog Wind Temperature Ranges.
PAGE 104
NOA-3570 User’s Guide Wind Any system components mounted outdoors will be subject to the effects of wind. It is important to know the direction and velocity of the wind common to the site. The mounting structure must be able to withstand these forces as well as protect against damage to the outdoor wireless device components. Antenna designs react differently to wind forces, depending on the location. This is known as wind loading.
PAGE 105
NOA-3570 User’s Guide Effects within the system or outside the system can cause interference. Good planning for frequencies and antennas can overcome most interference challenges. Co-Channel and Adjacent Channel Interference Co-channel interference results when another RF link is using the same channel frequency. Adjacent-channel interference results when another RF link is using an adjacent channel frequency.
PAGE 106
NOA-3570 User’s Guide Antenna gain is sometimes specified in dBi, which is how much the antenna increases the signal power compared to using an isotropic antenna. An isotropic antenna is a theoretical perfect antenna that sends out radio signals equally well in all directions. dBi represents the true gain that the antenna provides. Types of Antennas For WLAN There are two types of antennas used for wireless LAN applications.
PAGE 107
NOA-3570 User’s Guide Calculating a Link Budget A link budget is a rough calculation of all known elements of the link, to determine if the signal will have the proper strength when it reaches the other end of the link. To make this calculation, consider the following information. • A signal degrades as it moves through space. The longer the path, the more loss it experiences. This free-space path loss is a factor in calculating the link viability.
PAGE 108
NOA-3570 User’s Guide APPENDIX H Outdoor Installation Recommendations This appendix provides information on site requirements for the installation of your outdoor wireless device See the Quick Start Guide for more information on site installation. Mounting An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air.
PAGE 109
NOA-3570 User’s Guide Direct grounding of the antenna mast and outdoor wireless device. The outdoor wireless device should be connected to the same grounding system as the antenna mast and the AC wall outlet. The grounding system must comply with the National Electrical Code and safety standards that apply in your country. Always check with a qualified electrician if you are in doubt as to whether your outdoor installation is properly grounded.
PAGE 110
NOA-3570 User’s Guide For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area.
PAGE 111
NOA-3570 User’s Guide 244 Appendix H Outdoor Installation Recommendations
PAGE 112
NOA-3570 User’s Guide APPENDIX I Command Interpreter The following describes how to use the command interpreter. Enter 24 in the main menu to bring up the system maintenance menu. Enter 8 to go to Menu 24.8 - Command Interpreter Mode. See the included disk or zyxel.com for more detailed information on these commands. Note: Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable. Command Syntax • • • • • The command keywords are in courier new font.
PAGE 113
NOA-3570 User’s Guide 246 Appendix I Command Interpreter
PAGE 114
NOA-3570 User’s Guide APPENDIX J Brute-Force Password Guessing Protection Brute-force password guessing protection allows you to specify a wait-time that must expire before entering a fourth password after three incorrect passwords have been entered. The following describes the commands for enabling, disabling and configuring the brute-force password guessing protection mechanism for the password. See Appendix I on page 245 for information on the command structure.
PAGE 115
NOA-3570 User’s Guide 248 Appendix J Brute-Force Password Guessing Protection
PAGE 116
NOA-3570 User’s Guide APPENDIX K Log Descriptions This appendix provides descriptions of example log messages. Table 106 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on information from the time server. Time calibration failed The router failed to get information from the time server. DHCP client gets %s A DHCP client got a new IP address from the DHCP server. DHCP client IP expired A DHCP client's IP address has expired.
PAGE 117
NOA-3570 User’s Guide Table 107 ICMP NotesNOA-3570 TYPE CODE DESCRIPTION 0 Redirect datagrams for the Network 1 Redirect datagrams for the Host 2 Redirect datagrams for the Type of Service and Network 3 Redirect datagrams for the Type of Service and Host 8 Echo 0 11 Echo message Time Exceeded 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 13 Pointer indicates the error Timestamp 0 14 Timestamp request message Timestamp Reply 0 15 Time
PAGE 118
NOA-3570 User’s Guide Use sys logs category followed by a log category and a parameter to decide what to record Table 109 Log Categories and Available Settings LOG CATEGORIES AVAILABLE PARAMETERS error 0, 1, 2, 3 mten 0, 1 Use 0 to not record logs for that category, 1 to record only logs for that category, 2 to record only alerts for that category, and 3 to record both logs and alerts for that category.
PAGE 119
Professional installation instruction 1. Installation personal This product is designed for specific application and needs to be installed by a qualified personal who has RF and related rule knowledge. The general user shall not attempt to install or change the setting. 2. Installation location The product shall be installed at a location where the radiating antenna can be kept 20 cm from nearby person in normal operation condition to meet regulatory RF exposure requirement. 3.