ZyXEL M-302 User’s Guide ZyXEL M-302 XtremeMIMOTM 802.11b/g Wireless PCI Adapter User's Guide Version 1.
ZyXEL M-302 User’s Guide Copyright Copyright ©2005 by ZyXEL Communications Corporation The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
ZyXEL M-302 User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase.
ZyXEL M-302 User’s Guide Federal Communications Commission (FCC) 1 Interference Statement The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules.
ZyXEL M-302 User’s Guide Customer Support When contacting your Customer Support Representative, please have the following information ready: • Serial number for your specific product • Warranty information • Date you received or purchased your product • Brief description of the problem including any steps that you have taken before contacting the ZyXEL Customer Support Representative SUPPORT E-MAIL TELEPHONE2 WEB SITE REGULAR MAIL FAX 2 NORTH AMERICA 2 support@zyxel.
ZyXEL M-302 User’s Guide Table of Contents Copyright....................................................................................................................................................... ii ZyXEL Limited Warranty..........................................................................................................................iii Federal Communications Commission (FCC) Interference Statement .................................................. iv Customer Support ......................
ZyXEL M-302 User’s Guide 2.2.4 2.2.5 WPA-PSK Application Example .........................................................................................2-6 WPA with RADIUS Application Example ..........................................................................2-7 2.3 Fragmentation Threshold.............................................................................................................2-8 2.4 RTS/CTS Threshold..........................................................................
ZyXEL M-302 User’s Guide Preface Congratulations on the purchase of your new ZyXEL M-302 XtremeMIMO 802.11b/g Wireless PCI Adapter! About This User's Guide This manual provides detailed information about the ZyXEL Wireless LAN Utility. For hardware installation guidelines, please refer to the Quick Start Guide also included in your purchase of the ZyXEL M-302. Syntax Conventions • “Type” or “Enter” means for you to type one or more characters.
ZyXEL M-302 User’s Guide Graphics Icons Legend Wireless Access Point Computer Notebook computer Modem Wireless Signal Switch Router Server Telephone Preface ix
ZyXEL M-302 User’s Guide Chapter 1 Getting Started This chapter introduces the ZyXEL M-302 and prepares you to use the ZyXEL Utility. 1.1 About Your ZyXEL M-302 The ZyXEL M-302 is a state of the art high throughput IEEE 802.11b, and 802.11g compliant wireless LAN PCI adapter. Using the latest MIMO technology, the ZyXEL M-302 provides you with the optimal throughput speeds and range allowing you wireless mobility within almost any wireless networking environment.
ZyXEL M-302 User’s Guide 1.3 Using the ZyXEL Utility to Configure Your Network The following are explanations on how to configure and use the ZyXEL Utility program. For initial setup, please see the included Quick Start Guide. After completing the installation procedure, a new icon as shown below will automatically appear in the lower right tray bar. Double-clicking on the icon will display the following ZyXEL utility window.
ZyXEL M-302 User’s Guide 1.3.1 Network This page shows the status of the present network such as: Network Mode, relevant information on the current AP, TCP/IP, etc. This information cannot be modified in the Network screen. *note: The “Link Information” (lower) window shows the Link Speed, Signal Level, Channel, etc. between the client and AP. It is always in view regardless of which page (Network, Profile, SiteSurvey, Options, Version) is selected within the ZyXEL Utility.
ZyXEL M-302 User’s Guide 1.3.2 Profile This page is used to manage connections with Access Points. You can create different configuration profiles for connections with different APs and SSIDs. The advantage of saving different profiles is the easiness of quickly changing connections without having to configure the PC with every single variable each time a connection change is made.
ZyXEL M-302 User’s Guide 1) Click on [Add] and the following screen will appear. 2) On this screen you will insert some basic settings for your wireless network. a. [Profile Name] Enter in a descriptive name for this profile. b. [Network Mode] If connecting to an access point or wireless router, choose “Infrastructure” 3. If you are going to network one computer directly to another computer without an access point, then choose “Ad-Hoc”4. c.
ZyXEL M-302 User’s Guide then click on [Add to Profile]. If the access point you choose has encryption enabled, a window will pop up reminding you to enter the encryption information on the next page. If your access point is not listed, close the [Site Survey] window, and type the name of the SSID into the [SSID] field. d. Click [Next]. The following screen will appear. This screen will vary in appearance depending on if any encryption was enabled with your access point.
ZyXEL M-302 User’s Guide 4) On this screen you will configure the wireless modes supported by this profile. a. Under [Wireless Protocol], put a check mark next to each wireless protocol you want this profile to support. If you are unsure of which protocol to choose, leave all checked. b. Click [Next]. The following screen will appear.
ZyXEL M-302 User’s Guide 5) Final Step a. Uncheck the box [Apply this profile now] if you do not want to activate this profile at this time. b. Click [Save] to complete the wizard and save the profile you have just created. Remove To remove a profile from the “Profile List” select it and then click on [Remove]. Apply If you want to change the current profile with another profile from the “Profile List”, select the desired profile and click on [Apply].
ZyXEL M-302 User’s Guide Each page in [Properties] are explained below. Basic Settings: In this page, you can verify the name of the current profile. [Profile Name] Allows you to change the name of the current profile. [Network Mode] Allows you to change between Infrastructure and Ad-Hoc networking modes. [SSID] Allows you to change the SSID that this profile will associate with. Use the [Browse] button to perform a site survey and select the SSID from a list of available SSIDs.
ZyXEL M-302 User’s Guide Advanced Settings: This screen allows you to make changes to the default ways the adapter operates including advanced 802.11 settings. Unless you are an advanced user and have deep knowledge about each property on this page, it is recommended that you leave them at the default settings.
ZyXEL M-302 User’s Guide WLAN Security: This screen allows you to configure the security settings of your wireless LAN. Security Mode 1) No Encryption All data sent between the AP and the client is left unencrypted and may be viewed by other wireless devices. 2) WEP Wired Equivalent Privacy – Encrypts all traffic sent between the AP and the client using a shared key.
ZyXEL M-302 User’s Guide To learn more about WPA please see Chapter 2. 4) WPA-PSK WPA-PSK is a compromise between WPA and WEP. Like WEP, it uses a pre-shared key that every user of the network must have in order to be able to send and receive data. Like WPA, it uses either TKIP or AES, which improve greatly over the encryption found in WEP. We recommend you use WPA or WPA-PSK whenever possible. Wireless Protocol: This screen lets you define which 802.11 wireless standards to try to connect to.
ZyXEL M-302 User’s Guide [Use IP Changer] By putting a checkmark in the box, you will overwrite your existing WLAN TCP/IP configuration and use the IP Changer software built-into the ZyXEL Utility. This allows you to configure TCP/IP settings for each profile.
ZyXEL M-302 User’s Guide 1.3.3 Site Survey This page shows a list of SSIDs in your vicinity. Information regarding each SSID is also shown: SSID, mode, signal strength, channel, BSSID (MAC address), data rate, and WEP/WPA status. Refresh [Refresh] will scan the vicinity for a certain amount of time and display the scan results. Detailed Info [Detailed info] will display the following screen showing the selected device's configuration information.
ZyXEL M-302 User’s Guide Connect [Connect] will connect you to the access point selected. Add To Profile [Add To Profile] will allow you to add a specified access point / gateway to your favorites list.
ZyXEL M-302 User’s Guide 1.3.4 Options In this page you can configure the behavior of the ZyXEL utility.
ZyXEL M-302 User’s Guide 1.3.5 Version Software and Hardware information of the current client device.
ZyXEL M-302 User’s Guide Chapter 2 Wireless LAN Networking This chapter provides background information on general wireless LAN networking technology and terminology. 2.1 Overview This section describes the wireless LAN network terms and applications. 2.1.1 SSID The SSID (Service Set Identity) is a unique name shared among all wireless devices in a wireless network. Wireless devices must have the same SSID to communicate with each other. 2.1.
ZyXEL M-302 User’s Guide Ad-Hoc (IBSS) Ad-hoc mode does not require an AP or a wired network. Two or more wireless stations communicate directly to each other. An ad-hoc network may sometimes be referred to as an Independent Basic Service Set (IBSS). Figure 2-1 IBSS Example To set up an ad-hoc network, configure all wireless stations in ad-hoc network type and use the same SSID and channel.
ZyXEL M-302 User’s Guide Figure 2-3 Infrastructure Network Example 2.1.5 Roaming In an infrastructure network, wireless stations are able to switch from one BSS to another as they move between the coverage areas. During this period, the wireless stations maintain uninterrupted connection to the network. This is roaming. As the wireless station moves from place to place, it is responsible for choosing the most appropriate AP depending on the signal strength, network utilization or other factors.
ZyXEL M-302 User’s Guide Figure 2-4 Roaming Example 2.2 Wireless LAN Security Wireless LAN security is vital to your network to protect wireless communication between wireless stations and the wired network. The figure below shows the possible wireless security levels on your ZyXEL M-302. EAP (Extensible Authentication Protocol) is used for authentication and utilizes dynamic WEP key exchange.
ZyXEL M-302 User’s Guide Configure the wireless LAN security using the Profile Security Settings screen. If you do not enable any wireless security on your ZyXEL M-302, the ZyXEL M-302’s wireless communications are accessible to any wireless networking device that is in the coverage area. 2.2.1 Data Encryption with WEP WEP (Wired Equivalent Privacy) encryption scrambles all data packets transmitted between the ZyXEL M302 and the AP or other wireless stations to keep network communications private.
ZyXEL M-302 User’s Guide User Authentication WPA applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. Therefore, if you don’t have an external RADIUS server, you should use WPA-PSK (WPA -Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a client will be granted access to a WLAN.
ZyXEL M-302 User’s Guide Step 4. The AP and wireless clients use the TKIP encryption process to encrypt data exchanged between them. Figure 2-6 WPA-PSK Authentication 2.2.5 WPA with RADIUS Application Example You need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA application example with an external RADIUS server looks as follows. “A” is the RADIUS server. “DS” is the distribution system. Step 1.
ZyXEL M-302 User’s Guide Figure 2-7 WPA with RADIUS Application Example 2.3 Fragmentation Threshold The Fragmentation Threshold is the maximum data fragment size (between 256 and 2432 bytes) that can be sent in the wireless network before the ZyXEL M-302 will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference.
ZyXEL M-302 User’s Guide Figure 2-8 RTS Threshold When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations. RTS/CTS Threshold is designed to prevent collisions due to hidden nodes.
ZyXEL M-302 User’s Guide Open authentication mode is implemented for ease-of-use and when security is not an issue. The wireless station and the AP do not share a secret key. Thus the wireless stations can associate with any AP and listen to any data transmitted plaintext. Shared authentication mode involves a shared secret key to authenticate the wireless station to the AP. This requires you to enable the wireless LAN security and use same settings on both the wireless station and the AP.
ZyXEL M-302 User’s Guide Chapter 3 Maintenance This chapter describes how to uninstall or upgrade the ZyXEL Utility. 3.1 The Version Screen The Version screen displays related version numbers of the ZyXEL M-302. The following table describes the read-only fields in this screen.
ZyXEL M-302 User’s Guide About LABEL DESCRIPTION S/W Version This field displays the version number of the combination driver/utility package. Driver Version This field displays the version number of the ZyXEL driver. Utility Version This field displays the version number of the ZyXEL utility. 3.2 Uninstalling the ZyXEL Utility Follow the steps below to remove (or uninstall) the ZyXEL Utility from your computer. Step 1. Click Start, Programs, ZyXEL M-302 Utility, Uninstall ZyXEL M-302 Utility.
ZyXEL M-302 User’s Guide 3.3 Upgrading the ZyXEL Utility Before you uninstall the ZyXEL Utility, take note of the current network configuration. To perform the upgrade, follow the steps below. Step 1. Download the latest version of the utility from the ZyXEL web site and save the file on your computer. Step 2. Follow the steps in Section 3.2 to remove the current ZyXEL Utility from your computer. Step 3. Restart your computer if prompted. Step 4.
ZyXEL M-302 User’s Guide Chapter 4 Configuring Wireless Security This chapter covers the configuration of security options in the ZyXEL Utility. 4.1 Configuring Security You can configure your security settings at any time. Simply select the profile you wish to edit under the [Profile] tab, select [Properties] and then choose [WLAN Security]. You are also presented with the option to configure security during the profile creation process.
ZyXEL M-302 User’s Guide 2. 3. Put a check mark next to [Using Static WEP] Click [Configure]. You will then see the screen below. 4. [WEP Method] Select the correct encryption level to match your access point. Either 64, 128, or 152-bit. The encryption level set her must match the encryption level used by your access point. a. [Authentication] You can choose between Auto, Open System, and Shared. Please see section 2.5 for more information on the different types of authentication.
ZyXEL M-302 User’s Guide Manual Input (Hexadecimal): You generate your own WEP Key using hexadecimal characters (10 characters for 64-bit, 26 characters for 128-bit, 32 characters for 152-bit). 5. 6. 4.3 1. 2. 3. Click [OK] to save your settings and return to the previous screen. If you want to use 802.1x authentication with WEP, you will need to configure your 802.1x settings. Please see section 4.5 for details on configuring 802.1x. Configuring WPA-PSK Select [WPA-PSK] under [Security Mode].
ZyXEL M-302 User’s Guide 4.4 1. 2. 3. 4.5 1. 2. Configuring WPA Select [WPA] under [Security Mode]. Select [Encryption method]. You can choose between TKIP or AES. Most access points use TKIP for WPA. See section 4.5 for configuring 802.1x for WPA. Configuring 802.1x Choose the EAP method *TLS, TTLS, PEAP, LEAP* under [Authentication protocol]. Depending on the EAP method chosen the options under [User Information] will change. 4.5.1 Configuring 802.
ZyXEL M-302 User’s Guide 1. Enter in unique User ID and Password under [User Information] 4.5.2 Configuring 802.1x – EAP-PEAP 1. 2. 3. 4. 5. Click [Configure] under [Authentication protocol] Select inner PEAP protocol. You choices are [EAP/MS-CHAP v2] or [EAP/GTC]. Click [OK] to finish and return to the previous screen. Enter in unique User ID and Password under [User Information]. If using a user6 or server certificate click 6. 7. [Configure Certificate].
ZyXEL M-302 User’s Guide [Use user certificate]: Put a check in the box to activate user certificate. Then select certificate from the pull down menu. [Validate server certificate]: Put a check in the box to activate server certificate. Then select the certificate authority from the pull down menu. [Server name]: Name of server used for 802.1x authentication. Click [OK] to finish and return to the previous screen.
ZyXEL M-302 User’s Guide 4.5.3 Configuring 802.1x – EAP-TLS 1. 2. 3. Enter in unique User ID and Password under [User Information]. TLS requires you to configure both a server and user7 certificate. Click [Configure Certificate]. The following window appears: 7 You must first have a wired connection to a network and obtain the certificate(s) from a certificate authority (CA). Consult your network administrator for more information.
ZyXEL M-302 User’s Guide [Use user certificate]: Put a check in the box to activate user certificate. Then select certificate from the pull down menu. [Validate server certificate]: Put a check in the box to activate server certificate. Then select the certificate authority from the pull down menu. [Server name]: Name of server used for 802.1x authentication. 4. Make selections and then click [OK] to finish and return to the previous screen.
ZyXEL M-302 User’s Guide 4.5.4 Configuring 802.1x – EAP-TTLS 1. 2. 3. 4. Enter in unique User ID and Password under [User Information]. Select inner TTLS protocol. You can choose between [PAP], [CHAP], [MS-CHAP], [MS-CHAP v2], or [MD5-Challenge]. Click [OK] to finish and return to the previous screen. Click [Configure Certificate].
ZyXEL M-302 User’s Guide [Use user certificate]: Put a check in the box to activate user certificate. Then select certificate from the pull down menu. [Validate server certificate]: Put a check in the box to activate server certificate. Then select the certificate authority from the pull down menu. [Server name]: Name of server used for 802.1x authentication. 5. Make selections and then click [OK] to finish and return to the previous screen. Server certificate must be configured for TTLS to work.
ZyXEL M-302 User’s Guide Chapter 5 Troubleshooting This chapter covers potential problems and possible remedies. After each problem description, some instructions are provided to help you diagnose and solve the problem. 5.1 Problems Starting the ZyXEL Utility Program Table 5-1 Troubleshooting Starting ZyXEL Utility Program PROBLEM CORRECTIVE ACTION Cannot start the ZyXEL Wireless LAN Utility Make sure the ZyXEL M-302 is properly plugged in your PCMCIA Type II Slot and the LED(s) is on.
ZyXEL M-302 User’s Guide 5.3 Problems Communicating With Other Computers Table 5-3 Troubleshooting Communication Problems PROBLEM The ZyXEL M-302 computer cannot communicate with the other computer. A. B. 5-2 Infrastructure Ad-Hoc (IBSS) CORRECTIVE ACTION Make sure you are connected to the network. Make sure that the AP and the associated computers are turned on and working properly. Make sure the ZyXEL M-302 computer and the associated AP use the same SSID.
ZyXEL M-302 User’s Guide Appendix A Types of EAP Authentication This appendix discusses the five popular EAP authentication types: EAP-TLS, EAP-TTLS, PEAP and LEAP. The type of authentication you use depends on the RADIUS server. Consult your network administrator for more information. EAP-TLS (Transport Layer Security) With EAP-TLS, digital certifications are needed by both the server and the wireless stations for mutual authentication. The server presents a certificate to the client.
ZyXEL M-302 User’s Guide Comparison of EAP Authentication Types EAP-TLS EAP-TTLS PEAP LEAP Mutual Authentication Yes Yes Yes Yes Certificate – Client Yes Optional Optional No Certificate – Server Yes Yes Yes No Dynamic Key Exchange Yes Yes Yes Yes Strong Strong Strong Moderate Hard Moderate Moderate Moderate No Yes Yes No Credential Integrity Deployment Difficulty Client Identity Protection ii Appendix A
