Contents Overview Contents Overview User’s Guide .........................................................................................................................................9 Introducing the NWA1121-NI ................................................................................................................... 11 Introducing the Web Configurator ...........................................................................................................19 Dashboard ........................
Contents Overview 4 NWA1121-NI User’s Guide
Table of Contents Table of Contents Contents Overview ..............................................................................................................................3 Table of Contents .................................................................................................................................5 Part I: User’s Guide ........................................................................................... 9 Chapter 1 Introducing the NWA1121-NI............................
Table of Contents 4.1 How to Configure the Wireless LAN ..................................................................................................29 4.1.1 Choosing the Wireless Mode ...................................................................................................29 4.1.2 Further Reading .......................................................................................................................29 4.2 How to Configure Multiple Wireless Networks ...........................
Table of Contents 6.6.2 Security: 802.1x Only ..............................................................................................................77 6.6.3 Security: 802.1x Static WEP ....................................................................................................79 6.6.4 Security: WPA, WPA2, WPA2-MIX ..........................................................................................83 6.6.5 Security: WPA-PSK, WPA2-PSK, WPA2-PSK-MIX ......................................
Table of Contents Chapter 10 Log Settings ...................................................................................................................................... 115 10.1 Overview ....................................................................................................................................... 115 10.2 What You Can Do in this Chapter ................................................................................................. 115 10.3 What You Need To Know ..........
P ART I User’s Guide 9
10
C HAPT ER 1 Introducing the NWA1121-NI This chapt er int roduces t he m ain applicat ions and feat ures of t he NWA1121- NI . I t also discusses t he ways you can m anage your NWA1121- NI . 1.1 Introducing the NWA1121-NI Your NWA1121- NI is an I Pv6 wireless AP ( Access Point ) t hat can funct ion in several wireless m odes. I t ext ends t he range of your exist ing wired net work wit hout addit ional wiring, providing easy net work access t o m obile users.
Chapter 1 Introducing the NWA1121-NI 1.2.1 MBSSID A Basic Service Set ( BSS) is t he set of devices form ing a single wireless net work ( usually an access point and one or m ore wireless client s) . The Service Set I Dent ifier ( SSI D) is t he nam e of a BSS. I n Mult iple BSS ( MBSSI D) m ode, t he NWA1121- NI provides m ult iple virt ual APs, each form ing it s own BSS and using it s own individual SSI D profile.
Chapter 1 Introducing the NWA1121-NI 1.2.2 Wireless Client The NWA1121- NI can be used as a wireless client t o com m unicat e wit h an exist ing net work. I n t he figure below, t he print er can receive request s from t he wired com put er client s A and B via t he NWA1121- NI in Client m ode ( Z) .
Chapter 1 Introducing the NWA1121-NI 1.2.3 Root AP I n Root AP m ode, t he NWA1121- NI ( Z) can act as t he root AP in a wireless net work and also allow repeat ers ( X and Y) t o ext end t he range of it s wireless net work at t he sam e t im e. I n t he figure below, bot h client s A, B and C can access t he wired net work t hrough t he root AP.
Chapter 1 Introducing the NWA1121-NI bet ween associat ed wireless client s and t he wired LAN. Client s A, B and C access t he AP and t he wired net work behind t he AP t hrought repeat ers Z and Y. Figure 4 Repeat er Applicat ion When t he NWA1121- NI is in Repeat er m ode, universal repeat er securit y bet ween t he NWA1121- NI and ot her repeat er is independent of t he securit y bet ween t he wireless client s and t he AP or repeat er.
Chapter 1 Introducing the NWA1121-NI 1.4 Configuring Your NWA1121-NI’s Security Features Your NWA1121- NI com es wit h a variet y of securit y feat ures. This sect ion sum m arizes t hese feat ures and provides links t o sect ions in t he User ’s Guide t o configure securit y set t ings on your NWA1121- NI . Follow t he suggest ions below t o im prove securit y on your NWA1121- NI and net work. 1.4.1 Control Access to Your Device Ensure only people wit h perm ission can access your NWA1121- NI .
Chapter 1 Introducing the NWA1121-NI 1.6 Hardware Connections See your Quick St art Guide for inform at ion on m aking hardware connect ions. 1.7 LED Figure 5 LED Table 1 LED COLOR STATUS DESCRIPTION Am ber On There is syst em error and t he NWA1121- NI cannot boot up, or t he NWA1121- NI doesn’t have an Et hernet connect ion wit h t he LAN. Flashing The NWA1121- NI is st art ing up. Off The NWA1121- NI is receiving power and ready for use.
Chapter 1 Introducing the NWA1121-NI 18 NWA1121-NI User’s Guide
C HAPT ER 2 Introducing the Web Configurator This chapt er describes how t o access t he NWA1121- NI ’s web configurat or and provides an overview of it s screens. 2.1 Accessing the Web Configurator 1 Make sure your hardware is properly connect ed and prepare your com put er or com put er net work t o connect t o t he NWA1121- NI ( refer t o t he Quick St art Guide) . 2 Launch your web browser. 3 Type " 192.168.1.2" as t he URL ( default ) . The login screen appears.
Chapter 2 Introducing the Web Configurator Not e: I f you do not change t he password, t he following screen appears every t im e you login. Figure 7 Change Password Screen You should now see t he D a sh boa r d screen. See Chapt er 2 on page 19 for det ails about t he D a shboa r d screen. Not e: For securit y reasons, t he NWA1121- NI aut om at ically logs you out if you do not use t he web configurat or for five m inut es ( default ) . Sim ply log back int o t he NWA1121NI if t his happens. 2.
Chapter 2 Introducing the Web Configurator fact ory- default configurat ion file. This m eans t hat you will lose all t he set t ings you previously configured. The password will be reset t o “ 1234”. Figure 8 The RESET But t on 2.2.1 Methods of Restoring Factory-Defaults You can erase t he current configurat ion and rest ore fact ory default s in t wo ways: Use t he RESET but t on t o upload t he default configurat ion file. Hold t his but t on in for about 3 seconds ( t he light will begin t o blink) .
Chapter 2 Introducing the Web Configurator 2.3 Navigating the Web Configurator The following sum m arizes how t o navigat e t he web configurat or from t he D a shboa r d screen. Figure 9 St at us Screen of t he Web Configurat or A B C As illust rat ed above, t he Web Configurat or screen is divided int o t hese part s: • A - t it le bar • B - navigat ion panel • C - m ain window 2.3.1 Title Bar Click Logou t at any t im e t o exit t he Web Configurat or.
Chapter 2 Introducing the Web Configurator 2.3.2 Navigation Panel Use t he m enu it em s on t he navigat ion panel t o open screens t o configure NWA1121- NI feat ures. The following t ables describe each m enu it em . Table 2 Navigat ion Panel Sum m ary LINK TAB Dashboard FUNCTION This screen shows t he NWA1121- NI ’s general device and net work st at us inform at ion. Use t his screen t o access t he st at ist ics and client list .
Chapter 2 Introducing the Web Configurator Table 2 Navigat ion Panel Sum m ary LINK TAB FUNCTION Configurat ion File Use t his screen t o backup and rest ore your device’s configurat ion ( set t ings) or reset t he fact ory default set t ings. Rest art Use t his screen t o reboot t he NWA1121- NI wit hout t urning t he power off. 2.3.3 Main Window The m ain window displays inform at ion and configurat ion fields. I t is discussed in t he rest of t his docum ent .
C HAPT ER 3 Dashboard The D a shboa r d screens display when you log int o t he NWA1121- NI , or click D a shboa r d in t he navigat ion m enu. Use t he D a shboa r d screen t o look at t he current st at us of t he device, syst em resources, and int erfaces. The D a shboa r d screens also provide det ailed inform at ion about syst em st at ist ics, associat ed wireless client s, and logs. 3.
Chapter 3 Dashboard The following t able describes t he labels in t his screen. Table 3 The Dashboard Screen LABEL DESCRIPTION Refresh I nt erval Select how oft en you want t he NWA1121- NI t o updat e t his screen. Refresh Now Click t his t o updat e t his screen im m ediat ely. Syst em I nform at ion Syst em Nam e This field displays t he NWA1121- NI syst em nam e. I t is used for ident ificat ion. You can change t his in t he M a in t e n a n ce > Ge n e r a l screen’s Syst e m N a m e field.
Chapter 3 Dashboard Table 3 The Dashboard Screen ( cont inued) LABEL Current Dat e/ Tim e DESCRIPTION This field displays t he dat e and t im e configured on t he NWA1121- NI . You can change t his in t he M a in t e n a n ce > Tim e screen. Syst em Resource CPU Usage This field displays what percent age of t he NWA1121- NI ’s processing abilit y is current ly being used. The higher t he CPU usage, t he m ore likely t he NWA1121- NI is t o slow down.
Chapter 3 Dashboard 28 NWA1121-NI User’s Guide
C HAPT ER 4 Tutorial This chapt er first provides an overview of how t o configure t he wireless LAN on your NWA1121- NI , and t hen gives st ep- by- st ep guidelines showing how t o configure your NWA1121- NI for som e exam ple scenarios. 4.1 How to Configure the Wireless LAN This sect ion illust rat es how t o choose which wireless operat ing m ode t o use on t he NWA1121- NI and how t o set up t he wireless LAN in each wireless m ode. See Sect ion 4.1.
Chapter 4 Tutorial 6.4.4 on page 69) t o provide m ult iple wireless net works. Each wireless net work will cat er t o a different t ype of user. You want t o m ake t hree wireless net works: one st andard office wireless net work wit h all t he sam e set t ings you already have, anot her wireless net work wit h high priorit y QoS set t ings for Voice over I P ( VoI P) users, and a guest net work t hat allows visit ors t o access only t he I nt ernet and t he net work print er.
Chapter 4 Tutorial To configure t hese set t ings, you need t o know t he Media Access Cont rol ( MAC) addresses of t he devices you want t o allow users of t he guest net work t o access. The following t able shows t he addresses used in t his exam ple. Table 4 Tut orial: Exam ple I nform at ion Net work rout er ( A) MAC address 00: AA: 00: AA: 00: AA Net work print er ( B) MAC address AA: 00: AA: 00: AA: 00 4.2.1 Configure the SSID Profiles 1 Log in t o t he NWA1121- NI ( see Sect ion 2.
Chapter 4 Tutorial 4.2.1.1 MBSSID 32 1 Go t o W ir e le ss LAN > W ir e le ss Se t t ings. Select M BSSI D from t he Ope r a t ion M ode drop- down list box. 2 SSI D 0 1 is t he st andard net work, so select SSI D 0 1 as t he first profile. I t is always act ive. 3 Select VoI P_ SSI D as t he second profile, and Gu e st _ SSI D as t he t hird profile. Select t he corresponding Act ive check- boxes. 4 Click Apply t o save your set t ings. Now t he t hree SSI Ds are act ivat ed.
Chapter 4 Tutorial 4.2.2 Configure the Standard Network 1 Click W ir e le ss LAN > SSI D. Click t he Edit icon next t o SSI D 0 1 . 2 Select Se cPr ofile 1 as SSI D 0 1 ’s securit y profile. Select t he H idde n SSI D checkbox as you want only aut horized com pany em ployees t o use t his net work, so t here is no need t o broadcast t he SSI D t o wireless client s scanning t he area. Also, t he client s on SSI D 0 1 m ight need t o access ot her client s on t he sam e wireless net work.
Chapter 4 Tutorial 3 Next , click W ir e le ss LAN > Se cu r it y. Click t he Edit icon next t o Se cPr ofile 1 . 4 Since SSI D 0 1 is t he st andard net work t hat has access t o all resources, assign a m ore secure securit y m ode. Select W PA2 - PSK- M I X as t he Se cur it y M ode , and ent er t he Pr e - Sha r e d Ke y. I n t his exam ple, use ThisisSSI D 0 1 Pr e Sha r e dKe y. Click Apply. 5 You have finished configuring t he st andard net work, SSI D 0 1 . 4.2.
Chapter 4 Tutorial 3 Select W M M _ VOI CE in t he QoS field t o give VoI P t he highest priorit y in t he wireless net work. Click Apply. 4 Next , click W ir e le ss LAN > Se cu r it y. Click t he Edit icon next t o Se cPr ofile 2 .
Chapter 4 Tutorial 5 Select W PA2 - PSK as t he Se cur it y M ode , and ent er t he Pr e - Sha r e d Ke y. I n t his exam ple, use Th isisVoI PPr e Sh a r e dKe y. Click Apply. 6 Your VoI P wireless net work is now ready t o use. Any t raffic using t he VoI P_ SSI D profile will be given t he highest priorit y across t he wireless net work. 4.2.
Chapter 4 Tutorial 4 Select t he check- box of I nt r a - BSS Tr a ffic block ing Ena ble d. Click Apply. 5 Next , click W ir e le ss LAN > Se cu r it y. Click t he Edit icon next t o Se cPr ofile 3 . 6 Select W PA- PSK in t he Se cu r it y M ode field. WPA- PSK provides st rong securit y t hat is support ed by m ost wireless client s. Even t hough your Gue st _ SSI D client s do not have access t o sensit ive inform at ion on t he net work, you should not leave t he net work wit hout securit y.
Chapter 4 Tutorial 7 Ent er t he PSK you want t o use in your net work in t he Pr e Sha r e d Ke y field. I n t his exam ple, t he PSK is Thisism yGue st W PApr e - sh a r e dk e y. Click Apply. 8 Your guest wireless net work is now ready t o use. 4.2.5 Testing the Wireless Networks To m ake sure t hat t he t hree net works are correct ly configured, do t he following. • On a com put er wit h a wireless client , scan for access point s.
Chapter 4 Tutorial t o allow wireless t raffic bet ween B and wireless client s connect ed t o A ( W, Y and Z) . Ot her wireless devices ( X ) m ust not be able t o connect t o t he FTP server. Figure 11 FTP Server Connect ed t o a Wireless Client 4.3.2 Configuring the NWA1121-NI in MBSSID or Root AP Mode Before set t ing up t he NWA1121- NI as a wireless client ( B) , you need t o m ake sure t here is an access point t o connect t o.
Chapter 4 Tutorial Log int o t he Web Configurat or on NWA1121- NI ( A) and go t o t he W ir e le ss LAN > W ir e le ss Se t t in gs screen. 40 1 Set t he Ope r a t ion M ode t o Root AP. 2 Select t he W ir e le ss M ode . I n t his exam ple, select 8 0 2 .1 1 b/ g/ n . 3 Select Pr ofile 1 as t he SSI D Pr ofile . 4 Choose t he Cha nne l you want NWA1121- NI ( A) t o use. 5 Click Apply.
Chapter 4 Tutorial 6 Go t o W ir e le ss LAN > SSI D. Click t he Edit icon next t o Pr ofile 1 . 7 Change t he SSI D t o AP- A. 8 Select Se cPr ofile 1 in t he Se cur it y field. 9 Select t he check- box for I nt r a - BSS Tr a ffic block ing Ena ble d so t he client cannot access ot her client s on t he sam e wireless net work. 10 Click Apply.
Chapter 4 Tutorial 11 Go t o W ir e le ss LAN > Se cur it y. Click t he Edit icon next t o Se cPr ofile 1 . 12 Configure W PA- PSK as t he Se cur it y M ode and ent er Th isisM yPr e Sh a r e dKe y in t he Pr e Sha r e d Ke y field. 13 Click Apply t o finish configurat ion for NWA1121- NI ( A) . 4.3.3 Configuring the NWA1121-NI in Wireless Client Mode The NWA1121- NI ( B) should have a wired connect ion before it can be set t o wireless client operat ing m ode.
Chapter 4 Tutorial 1 Select Clie n t as Ope r a t ion M ode. Click Apply. 2 Click on t he Sit e Su r ve y but t on. A window should pop up which cont ains a list of all available wireless devices wit hin your NWA1121- NI ’s range. 3 Find and select NWA1121- NI ( A) ’s SSI D: AP- A.
Chapter 4 Tutorial 4 Go t o W ir e le ss LAN > Se cur it y t o configure t he NWA1121- NI t o use t he sam e securit y m ode and Pre- Shared Key as NWA1121- NI ( A) : W PA- PSK/ ThisisM yPr e Sh a r e dKe y. Click Apply. Figure 12 4.3.4 MAC Filter Setup One way t o ensure t hat only specified wireless client s can access t he FTP server is by enabling MAC filt ering on NWA1121- NI ( B) ( See Sect ion 6.8 on page 89 for m ore inform at ion on MAC Filt er) . 1 Go t o W ir e le ss LAN > M AC Filt e r.
Chapter 4 Tutorial 4.3.5 Testing the Connection and Troubleshooting This sect ion discusses how you can check if you have correct ly configured your net work set up as described in t his t ut orial. • Try accessing t he FTP server from wireless client s W , Y or Z. Test if you can send or ret rieve a file. I f you cannot est ablish a connect ion wit h t he FTP server, do t he following st eps. 1 Make sure W , Y and Z use t he sam e wireless securit y set t ings as A and can access A.
Chapter 4 Tutorial 46 NWA1121-NI User’s Guide
P ART II Technical Reference The appendices provide general inform at ion. Som e det ails m ay not apply t o your NWA1121- NI .
48
C HAPT ER 5 Monitor 5.1 Overview This chapt er discusses read- only inform at ion relat ed t o t he device st at e of t he NWA1121- NI . Not e: To access t he M on it or screens, you can also click t he links in t he Sum m ary t able of t he D a sh boa r d screen t o view t he wireless packet s sent / r eceived as well as t he st at us of client s connect ed t o t he NWA1121- NI . 5.
Chapter 5 Monitor Click M onit or > Logs. Figure 13 Logs The following t able describes t he labels in t his screen. Table 5 Logs LABEL DESCRIPTION Display Select a cat egory of logs t o view. Select All Log t o view logs from all of t he log cat egories t hat you select ed in t he Con figu r a t ion > Log Se t t in gs screen.
Chapter 5 Monitor Click M onit or > St a t ist ics. The following screen pops up. Figure 14 St at ist ics The following t able describes t he labels in t his screen. Table 6 St at ist ics LABEL DESCRIPTION Descript ion This is t he wireless int erface on t he NWA1121- NI . 802.11 Mode This field shows which 802.11 m ode t he NWA1121- NI is using. Channel I D This shows t he channel num ber which t he NWA1121- NI is current ly using over t he wireless LAN.
Chapter 5 Monitor Click M onit or > Associa t ion List t o display t he screen as shown next . Figure 15 Associat ion List The following t able describes t he labels in t his screen. Table 7 Associat ion List LABEL DESCRIPTION # This is t he index num ber of an associat ed wireless device. MAC Address This field displays t he MAC address of an associat ed wireless device. SSI D This field displays t he SSI D t o which t he wireless device is associat ed.
Chapter 5 Monitor Wait a m om ent while t he NWA1121- NI com piles t he inform at ion. Figure 16 Channel Usage The following t able describes t he labels in t his screen. Table 8 Channel Usage LABEL DESCRIPTION SSI D This is t he Service Set I Dent ificat ion ( SSI D) nam e of t he AP in an I nfrast ruct ure wireless net work or wireless st at ion in an Ad- Hoc wireless net work.
Chapter 5 Monitor 54 NWA1121-NI User’s Guide
C HAPT ER 6 Wireless LAN 6.1 Overview This chapt er discusses t he st eps t o configure t he Wireless Set t ings screen on t he NWA1121- NI . I t also int roduces t he wireless LAN ( WLAN) and som e basic scenarios. Figure 17 Wireless Mode I n t he figure above, t he NWA1121- NI allows access t o anot her bridge device ( A) and a not ebook com put er ( B) upon verifying t heir set t ings and credent ials.
Chapter 6 Wireless LAN 6.3 What You Need To Know BSS A Basic Service Set ( BSS) exist s when all com m unicat ions bet ween wireless client s or bet ween a wireless client and a wired net work client go t hrough one access point ( AP) . I nt ra- BSS t raffic is t raffic bet ween wireless client s in t he BSS. ESS An Ext ended Service Set ( ESS) consist s of a series of overlapping BSSs, each cont aining an access point , wit h each access point connect ed t oget her by a wired net work.
Chapter 6 Wireless LAN Wireless Mode The I EEE 802.1x st andard was designed t o ext end t he feat ures of I EEE 802.11 t o support ext ended aut hent icat ion as well as providing addit ional account ing and cont rol feat ures. Your NWA1121- NI can support 8 0 2 .1 1 b/ g, 8 0 2 .1 1 n and 8 0 2 .1 1 b/ g/ n . MBSSID Tradit ionally, you needed t o use different APs t o configure different Basic Service Set s ( BSSs) .
Chapter 6 Wireless LAN User Authentication Aut hent icat ion is t he process of verifying whet her a wireless device is allowed t o use t he wireless net work. You can m ake every user log in t o t he wireless net work before t hey can use it . However, every device in t he wireless net work has t o support I EEE 802.1x t o do t his. For wireless net works, you can st ore t he user nam es and passwords for each user in a RADI US server. This is a server used in businesses m ore t han in hom es.
Chapter 6 Wireless LAN Passphrase A passphrase funct ions like a password. I n WEP securit y m ode, it is furt her convert ed by t he NWA1121- NI int o a com plicat ed st ring t hat is referred t o as t he “ key”. This key is request ed from all devices wishing t o connect t o a wireless net work. PSK The Pre- Shared Key ( PSK) is a password shared by a wireless access point and a client during a previous secure connect ion.
Chapter 6 Wireless LAN I n t he figure above, wireless client s A and B are t rying t o access t he I nt ernet via t he NWA1121- NI . The NWA1121- NI in t urn queries t he RADI US server if t he ident it y of client s A and U are allowed access t o t he I nt ernet . I n t his scenario, only client U’s ident it y is verified by t he RADI US server and allowed access t o t he I nt ernet . The RADI US server handles t he following t asks: • Aut he nt ica t ion which det erm ines t he ident it y of t he users.
Chapter 6 Wireless LAN 6.4.1 Root AP Mode Use t his screen t o use your NWA1121- NI as an access point . Select Root AP as t he Ope r a t ion M ode . The following screen displays.
Chapter 6 Wireless LAN The following t able describes t he general wireless LAN labels in t his screen. Table 10 Wireless LAN > Wireless Set t ings: Root AP LABEL DESCRIPTION Basic Set t ings Wireless LAN I nt erface Select t he check box t o t urn on t he wireless LAN on t he NWA1121- NI . Operat ion Mode Select Root AP from t he drop- down list . Wireless Mode Select 8 0 2 .1 1 b/ g t o allow bot h I EEE802.11b and I EEE802.11g com pliant WLAN devices t o associat e wit h t he NWA1121- NI .
Chapter 6 Wireless LAN Table 10 Wireless LAN > Wireless Set t ings: Root AP ( cont inued) LABEL DESCRIPTION Advanced Set t ings Beacon I nt erval When a wirelessly net work device sends a beacon, it includes wit h it a beacon int erval. This specifies t he t im e period before t he device sends t he beacon again. The int erval t ells receiving devices on t he net work how long t hey can wait in lowpower m ode before waking up t o handle t he beacon.
Chapter 6 Wireless LAN 6.4.2 Repeater Mode Use t his screen t o have t he NWA1121- NI act as a wireless repeat er. You need t o know t he MAC address of t he peer device, which also m ust be in Repeat er or Root AP m ode. Figure 21 Wireless LAN > Wireless Set t ings: Repeat er The following t able describes t he bridge labels in t his screen.
Chapter 6 Wireless LAN Table 11 Wireless LAN > Wireless Set t ings: Repeat er ( cont inued) LABEL DESCRIPTION Wireless Mode Select 8 0 2 .1 1 b/ g t o allow bot h I EEE802.11b and I EEE802.11g com pliant WLAN devices t o associat e wit h t he NWA1121- NI . The t ransm ission rat e of your NWA1121- NI m ight be reduced. Select 8 0 2 .1 1 b/ g/ n t o allow I EEE802.11b, I EEE802.11g and I EEE802.11n com pliant WLAN devices t o associat e wit h t he NWA1121- NI .
Chapter 6 Wireless LAN Table 11 Wireless LAN > Wireless Set t ings: Repeat er ( cont inued) LABEL DESCRIPTION Pream ble Type Select D yn a m ic t o have t he AP aut om at ically use short pream ble when wireless adapt ers support it , ot herwise t he AP uses long pream ble. Select Lon g if you are unsure what pream ble m ode t he wireless adapt ers support , and t o provide m ore reliable com m unicat ions in busy wireless net works.
Chapter 6 Wireless LAN 6.4.3 Wireless Client Mode Use t his screen t o t urn your NWA1121- NI int o a wireless client . Select Clie nt as t he Ope r a t ion M ode . The following screen displays. Figure 22 Wireless LAN > Wireless Set t ings: Wireless Client The following t able describes t he general wireless LAN labels in t his screen.
Chapter 6 Wireless LAN Table 12 Wireless LAN > Wireless Set t ings: Wireless Client ( cont inued) LABEL DESCRIPTION SSI D Profile The SSI D ( Service Set I Dent ifier) ident ifies t he Service Set wit h which a wireless st at ion is associat ed. Wireless st at ions associat ing t o t he access point ( AP) m ust have t he sam e SSI D. I n t his field, select t he SSI D profile of t he AP you want t o use. Click Apply.
Chapter 6 Wireless LAN Table 12 Wireless LAN > Wireless Set t ings: Wireless Client ( cont inued) LABEL DESCRIPTION Short GI Select Ena ble d t o use Sh or t GI ( Guard I nt erval) . The guard int erval is t he gap int roduced bet ween dat a t ransm ission from users in order t o reduce int erference. Reducing t he GI increases dat a t ransfer rat es but also increases int erference. I ncreasing t he GI reduces dat a t ransfer rat es but also reduces int erference.
Chapter 6 Wireless LAN The following t able describes t he labels in t his screen. Table 13 Wireless LAN > Wireless Set t ings: MBSSI D LABEL DESCRIPTION Basic Set t ings Wireless LAN I nt erface Select t he check box t o t urn on t he wireless LAN on t he NWA1121- NI . Operat ion Mode Select M BSSI D from t he drop- down list . Wireless Mode Select 8 0 2 .1 1 b/ g t o allow bot h I EEE802.11b and I EEE802.11g com pliant WLAN devices t o associat e wit h t he NWA1121- NI .
Chapter 6 Wireless LAN Table 13 Wireless LAN > Wireless Set t ings: MBSSI D ( cont inued) LABEL DESCRIPTION Pream ble Type Select D yn a m ic t o have t he AP aut om at ically use short pream ble when wireless adapt ers support it , ot herwise t he AP uses long pream ble. Select Lon g if you are unsure what pream ble m ode t he wireless adapt ers support , and t o provide m ore reliable com m unicat ions in busy wireless net works.
Chapter 6 Wireless LAN 6.5 SSID Screen Use t his screen t o view and m odify t he set t ings of t he SSI D profiles on t he NWA1121- NI . Click W ir e le ss LAN > SSI D t o display t he screen as shown. Figure 24 Wireless LAN > SSI D The following t able describes t he labels in t his screen. Figure 25 Wireless LAN > SSI D LABEL DESCRI PTI ON Profile Set t ings # 72 This field displays t he index num ber of each SSI D profile.
Chapter 6 Wireless LAN 6.5.1 Configuring SSID Use t his screen t o configure an SSI D profile. I n t he W ir e le ss LAN > SSI D screen, click Edit next t o t he SSI D profile you want t o configure t o display t he following screen. Figure 26 SSI D: Edit The following t able describes t he labels in t his screen. Table 14 SSI D: Edit LABEL DESCRI PTI ON Profile Nam e This is t he nam e t hat ident ifying t his profile.
Chapter 6 Wireless LAN Table 14 SSI D: Edit ( cont inued) LABEL DESCRI PTI ON BSSI D VLAN I D Ent er a VLAN I D for t he SSI D profile. Packet s com ing from t he WLAN using t his SSI D profile are t agged wit h t he VLAN I D num ber by t he NWA1121- NI . Num ber of Wireless St at ions Allowed t o Associat e Use t his field t o set a m axim um num ber of wireless st at ions t hat m ay connect t o t he device.
Chapter 6 Wireless LAN The Se cur it y Se t t in gs screen varies depending upon t he securit y m ode you select . Figure 28 Securit y: None Not e t hat som e screens display different ly depending on t he operat ing m ode select ed in t he W ir e le ss LAN > W ir e le ss Se t t ings screen. Not e: You m ust enable t he sam e wireless securit y set t ings on t he NWA1121- NI and on all wireless client s t hat you want t o associat e wit h it .
Chapter 6 Wireless LAN 6.6.1 Security: WEP Use t his screen t o use WEP as t he securit y m ode for your NWA1121- NI . Select W EP in t he Se cur it y M ode field t o display t he following screen. Figure 29 Securit y: WEP The following t able describes t he labels in t his screen. Table 15 Securit y: WEP 76 LABEL DESCRIPTION Profile Nam e This is t he nam e t hat ident ifying t his profile. Securit y Mode Choose W EP in t his field.
Chapter 6 Wireless LAN Table 15 Securit y: WEP ( cont inued) LABEL DESCRIPTION Key 1 t o The WEP keys are used t o encrypt dat a. Bot h t he NWA1121- NI and t he wireless st at ions m ust use t he sam e WEP key for dat a t ransm ission. Key 4 I f you chose 6 4 - bit W EP, t hen ent er any 5 ASCI I charact ers or 10 hexadecim al charact ers ( " 0- 9" , " A- F" ) . I f you chose 1 2 8 - bit W EP, t hen ent er 13 ASCI I charact ers or 26 hexadecim al charact ers ( " 0- 9" , " A- F" ) .
Chapter 6 Wireless LAN Table 16 Securit y: 802.1x Only for Access Point ( cont inued) LABEL DESCRIPTION Reaut hent icat ion Tim e Specify how oft en wireless st at ions have t o resend user nam es and passwords in order t o st ay connect ed. Ent er a t im e int erval bet ween 100 and 3600 seconds. Alt ernat ively, ent er “ 0” t o t urn reaut hent icat ion off. Note: If wireless station authentication is done using a RADIUS server, the reauthentication timer on the RADIUS server has priority.
Chapter 6 Wireless LAN Table 17 Securit y: 802.1x Only for Wireless Client ( cont inued) LABEL DESCRIPTION Securit y Mode Choose t he sam e securit y m ode used by t he AP. I EEE802.1x Aut hent icat ion Eap Type The opt ions on t he left refer t o EAP m et hods. You can choose eit her TLS, LEAP, PEAP or TTLS. I f you select TTLS or PEAP, t he opt ions on t he right refer t o aut hent icat ion prot ocols. You can choose bet ween PAP, CH AP, M SCH AP, M SCH APv2 and/ or GTC.
Chapter 6 Wireless LAN 6.6.3.1 Access Point Use t his screen t o use 802.1x st at ic WEP securit y m ode for your NWA1121- NI t hat is in root AP, MBSSI D or repeat er operat ing m ode. Select 8 0 2 .1 X- St a t ic W EP in t he Se cur it y M ode field t o display t he following screen. Figure 32 Securit y: 802.1X- St at ic WEP for Access Point The following t able describes t he labels in t his screen. Table 18 Securit y: 802.
Chapter 6 Wireless LAN Table 18 Securit y: 802.1X- St at ic WEP for Access Point ( cont inued) LABEL DESCRIPTION Key 1 t o The WEP keys are used t o encrypt dat a. Bot h t he NWA1121- NI and t he wireless st at ions m ust use t he sam e WEP key for dat a t ransm ission. Key 4 I f you chose 6 4 - bit W EP, t hen ent er any 5 ASCI I charact ers or 10 hexadecim al charact ers ( " 0- 9" , " A- F" ) .
Chapter 6 Wireless LAN 6.6.3.2 Wireless Client Use t his screen t o use 802.1x- Only securit y m ode for your NWA1121- NI t hat is in wireless client operat ing m ode. Select 8 0 2 .1 X- St a t ic W EP in t he Se cur it y M ode field t o display t he following screen. Figure 33 Securit y: 802.1X- St at ic WEP for Wireless Client The following t able describes t he labels in t his screen. Table 19 Securit y: 802.
Chapter 6 Wireless LAN Table 19 Securit y: 802.1X- St at ic WEP for Wireless Client ( cont inued) LABEL DESCRIPTION Dat a Encrypt ion Select 6 4 - bit W EP or 1 2 8 - bit W EP t o enable dat a encrypt ion. Passphrase Ent er t he passphrase or st ring of t ext used for aut om at ic WEP key generat ion. Generat e Click t his t o get t he keys from t he Pa ssph r a se you ent ered. Key 1 t o The WEP keys are used t o encrypt dat a.
Chapter 6 Wireless LAN 6.6.4.1 Access Point Use t his screen t o em ploy WPA or WPA2 as t he securit y m ode for your NWA1121- NI t hat is in root AP, MBSSI D or repeat er operat ing m ode. Select W PA, W PA2 or W PA2 - M I X in t he Se cur it y M ode field t o display t he following screen. Figure 34 Securit y: WPA/ WPA2 for Access Point The following t able describes t he labels in t his screen.
Chapter 6 Wireless LAN 6.6.4.2 Wireless Client Use t his screen t o em ploy WPA or WPA2 as t he securit y m ode for your NWA1121- NI t hat is in wireless client operat ing m ode. Select W PA or W PA2 in t he Se cur it y M ode field t o display t he following screen. Figure 35 Securit y: WPA for Wireless Client The following t able describes t he labels in t his screen.
Chapter 6 Wireless LAN Table 21 Securit y: WPA/ WPA2 for Wireless Client ( cont inued) LABEL DESCRIPTION Back Click Ba ck t o ret urn t o t he previous screen. Apply Click Apply t o save your changes. Cancel Click Ca n ce l t o begin configuring t his screen afresh. 6.6.5 Security: WPA-PSK, WPA2-PSK, WPA2-PSK-MIX Use t his screen t o em ploy WPA- PSK, WPA2- PSK or WPA2- PSK- MI X as t he securit y m ode of your NWA1121- NI .
Chapter 6 Wireless LAN 6.7 RADIUS Screen Use t his screen t o set up your NWA1121- NI ’s RADI US server set t ings. Click W ir e le ss LAN > RAD I US. The screen appears as shown. Figure 37 Wireless LAN > RADI US Select a profile you want t o configure and click Edit .
Chapter 6 Wireless LAN The following t able describes t he labels in t his screen. Table 23 Wireless LAN > RADI US LABEL DESCRIPTION Profile Nam e This is t he nam e t hat ident ifying t his RADI US profile. Prim ary RADI US Server Select t he check box t o enable user aut hent icat ion t hrough an ext ernal aut hent icat ion server. Prim ary Server I P Address Ent er t he I P address of t he RADI US server t o be used for aut hent icat ion.
Chapter 6 Wireless LAN Table 23 Wireless LAN > RADI US ( cont inued) LABEL DESCRIPTION Apply Click Apply t o save your changes. Cancel Click Ca n ce l t o begin configuring t his screen afresh. 6.8 MAC Filter Screen Every Et hernet device has a unique MAC ( Media Access Cont rol) address. The MAC address is assigned at t he fact ory and consist s of six pairs of hexadecim al charact ers, for exam ple, 00: A0: C5: 00: 00: 02.
Chapter 6 Wireless LAN Use t his screen t o enable MAC address filt ering in your NWA1121- NI . You can specify MAC addresses t o eit her allow or deny associat ion wit h your NWA1121- NI . Click W ir e le ss LAN > M AC Filt e r. The screen displays as shown. Figure 40 Wireless LAN > MAC Filt er Select a profile you want t o configure and click Edit .
Chapter 6 Wireless LAN The following t able describes t he labels in t his screen. Table 24 Wireless LAN > MAC Filt er LABEL DESCRIPTION Profile Nam e This is t he nam e t hat ident ifying t his profile. Access Cont rol Mode Select D isa ble d if you do not want t o use t his feat ure. Select Allow t o perm it access t o t he NWA1121- NI . MAC addresses not list ed will be denied access t o t he NWA1121- NI . Select D e n y t o block access t o t heNWA1121- NI .
Chapter 6 Wireless LAN TERM DESCRIPTION Roam ing I f you have t wo or m ore NWA1121- NI s ( or ot her wireless access point s) on your wireless net work, you can enable t his opt ion so t hat wireless devices can change locat ions wit hout having t o log in again. This is useful for devices, such as not ebooks, t hat m ove around a lot . Ant enna An ant enna couples Radio Frequency ( RF) signals ont o air.
Chapter 6 Wireless LAN 6.9.3 Security Mode Guideline The following is a general guideline in choosing t he securit y m ode for your NWA1121- NI . • Use WPA( 2) - PSK if you have WPA( 2) - aware wireless client s but no RADI US server. • Use WPA( 2) securit y if you have WPA( 2) - aware wireless client s and a RADI US server. WPA has user aut hent icat ion and im proved dat a encrypt ion over WEP. • Use WPA( 2) - PSK if you have WPA( 2) - aware wireless client s but no RADI US server.
C HAPT ER 7 LAN 7.1 Overview This chapt er describes how you can configure t he I P address of your NWA1121- NI . The I nt ernet Prot ocol ( I P) address ident ifies a device on a net work. Every net working device ( including com put ers, servers, rout ers, print ers, et c.) needs an I P address t o com m unicat e across t he net work. These net working devices are also known as host s. Figure 42 I Pv4 Set up The figure above illust rat es one possible set up of your NWA1121- NI .
Chapter 7 LAN IPv6 I Pv6 ( I nt ernet Prot ocol version 6) , is designed t o enhance I P address size and feat ures. The increase in I Pv6 address size t o 128 bit s ( from t he 32- bit I Pv4 address) allows up t o 3.4 x 10 38 I P addresses. IPv6 Addressing The 128- bit I Pv6 address is writ t en as eight 16- bit hexadecim al blocks separat ed by colons ( : ) . This is an exam ple I Pv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000.
Chapter 7 LAN 7.4 LAN IP Screen Use t his screen t o configure t he I P address for your NWA1121- NI . Click N e t w or k > LAN t o display t he following screen. Figure 43 LAN I P The following t able describes t he labels in t his screen. Table 28 LAN I P LABEL DESCRIPTION I Pv4 Address Assignm ent Obt ain I P Address Aut om at ically Select t his opt ion if your NWA1121- NI is using a dynam ically assigned I Pv4 address from a DHCP server each t im e.
Chapter 7 LAN Table 28 LAN I P ( cont inued) LABEL DESCRIPTION I Pv6 Address Assignm ent Enable St at eful Address Aut oconfigurat ion Select t his t o t urn on I Pv6 st at eful aut oconfigurat ion t o have t he NWA1121- NI obt ain an I Pv6 global address from a DHCPv6 server in your net work. I Pv6 Address/ Prefix Lengt h Ent er your I Pv6 address and prefix m anually. Syst em DNS Servers Prim ary DNS Server Ent er t he I Pv4 address of t he first DNS ( Dom ain Nam e Service) server, if provided.
C HAPT ER 8 VLAN 8.1 Overview This chapt er discusses how t o configure t he NWA1121- NI ’s VLAN set t ings. Figure 44 Managem ent VLAN Set up B A I n t he figure above, t o access and m anage t he NWA1121- NI from com put er A, t he NWA1121- NI and swit ch B’s port s t o which com put er A and t he NWA1121- NI are connect ed should be in t he sam e VLAN. 8.1.1 What You Can Do in This Chapter The VLAN screens let you set up t he NWA1121- NI ’s m angem ent VLAN ( Sect ion 8.3 on page 99) . 8.
Chapter 8 VLAN VLAN also increases net work perform ance by lim it ing broadcast s t o a sm aller and m ore m anageable logical broadcast dom ain. I n t radit ional swit ched environm ent s, all broadcast packet s go t o each and every individual port . Wit h VLAN, all broadcast s are confined t o a specific broadcast dom ain. IEEE 802.1Q Tag The I EEE 802.1Q st andard defines an explicit VLAN t ag in t he MAC header t o ident ify t he VLAN m em bership of a fram e across bridges.
Chapter 8 VLAN 100 NWA1121-NI User’s Guide
C HAPT ER 9 System 9.1 Overview This chapt er shows you how t o enable rem ot e m anagem ent of your NWA1121- NI . I t provides inform at ion on det erm ining which services or prot ocols can access which of t he NWA1121- NI ’s int erfaces. Rem ot e Managem ent allows a user t o adm inist rat e t he device over t he net work.
Chapter 9 System • Use t he Te lne t screen t o configure t hrough which int erface( s) and from which I P address( es) you can use Telnet t o m anage t he NWA1121- NI . A Telnet connect ion is priorit ized by t he NWA1121- NI over ot her rem ot e m anagem ent sessions ( see Sect ion 9.6 on page 106) . • Use t he SN M P screen t o configure t hrough which int erface( s) and from which I P address( es) a net work syst em s m anager can access t he NWA1121- NI ( see Sect ion 9.7 on page 107) .
Chapter 9 System The next figure illust rat es an SNMP m anagem ent operat ion. Figure 48 SNMP Managem ent Mode An SNMP m anaged net work consist s of t wo m ain t ypes of com ponent : agent s and a m anager. An agent is a m anagem ent soft ware m odule t hat resides in a m anaged device ( t he NWA1121- NI ) . An agent t ranslat es t he local m anagem ent inform at ion from t he m anaged device int o a form com pat ible wit h SNMP.
Chapter 9 System • You m ay only aut om at ically m anagem ent m anagem ent 1 Telnet 2 HTTP have one rem ot e m anagem ent session running at one t im e. The NWA1121- NI disconnect s a rem ot e m anagem ent session of lower priorit y when anot her rem ot e session of higher priorit y st art s. The priorit ies for t he different t ypes of rem ot e sessions are as follows: System Timeout There is a default syst em m anagem ent idle t im eout of five m inut es ( t hree hundred seconds) .
Chapter 9 System To change your NWA1121- NI ’s W W W set t ings, click Syst e m > W W W. The following screen shows. Figure 50 Syst em > WWW The following t able describes t he labels in t his screen. Table 29 Syst em > WWW LABEL DESCRIPTION WWW HTTP Port You m ay change t he server port num ber for a service if needed, however you m ust use t he sam e port num ber in order t o use t hat service for rem ot e m anagem ent . HTTPS Port The HTTPS proxy server list ens on port 443 by default .
Chapter 9 System Click Syst e m > Ce r t ifica t e s. The following screen shows. Figure 51 Syst em > Cert ificat es The following t able describes t he labels in t his screen. Table 30 Syst em > Cert ificat es LABEL DESCRIPTION I m port Cert ificat e I m port Cert ificat e Ent er t he locat ion of a previously- saved cert ificat e t o upload t o t he NWA1121- NI . Alt ernat ively, click t he Br ow se but t on t o locat e a list .
Chapter 9 System The following t able describes t he labels in t his screen. Table 31 Syst em > Telnet LABEL DESCRIPTION TELNET Port You can change t he server port num ber for a service if needed, however you m ust use t he sam e port num ber in order t o use t hat service for rem ot e m anagem ent . Server Access Select t he int erface( s) t hrough which a com put er m ay access t he NWA1121- NI using Telnet .
Chapter 9 System m anager. To change your NWA1121- NI ’s SNMP set t ings, click Syst e m > SN M P. The following screen displays. Figure 53 Syst em > SNMP The following t able describes t he labels in t his screen. Table 32 Syst em > SNMP LABEL DESCRIPTION SNMP Port 108 You can change t he server port num ber for a service if needed, however you m ust use t he sam e port num ber in order t o use t hat service for rem ot e m anagem ent .
Chapter 9 System Table 32 Syst em > SNMP ( cont inued) LABEL DESCRIPTION Server Access Select t he int erface( s) t hrough which a com put er m ay access t he NWA1121- NI using Telnet . Secured Client I P Address A secured client is a “ t rust ed” com put er t hat is allowed t o com m unicat e wit h t he NWA1121- NI using t his service. Select All t o allow any com put er t o access t he NWA1121- NI using t his service.
Chapter 9 System Table 32 Syst em > SNMP ( cont inued) LABEL DESCRIPTION SNMPv3 User Set t ings SNMPv3 User Select t he check box t o enable t he SNMP user account for aut hent icat ion wit h SNMP m anagers using SNMP v3. User Nam e Specify t he user nam e of t he SNMP user account . Password Ent er t he password for SNMP user aut hent icat ion. Confirm Password Ret ype t he password for confirm at ion. Access Type Specify t he SNMP user ’s access right s t o MI Bs.
Chapter 9 System The following t able describes t he labels in t his screen. Table 33 Syst em > FTP LABEL DESCRIPTION FTP Port You m ay change t he server port num ber for a service if needed, however you m ust use t he sam e port num ber in order t o use t hat service for rem ot e m anagem ent . Server Access Select t he int erface( s) t hrough which a com put er m ay access t he NWA1121- NI using t his service.
Chapter 9 System 9.9.3 SNMP Traps SNMP t raps are m essages sent by t he agent s of each m anaged device t o t he SNMP m anager. These m essages inform t he adm inist rat or of event s in dat a net works handled by t he device. The NWA1121- NI can send t he following t raps t o t he SNMP m anager. Table 34 SNMP Traps OBJECT IDENTIFIER # (OID) TRAP NAME DESCRIPTION Generic Traps coldSt art 1.3.6.1.6.3.1.1.5.1 This t rap is sent aft er boot ing ( power on) . This t rap is defined in RFC- 1215.
Chapter 9 System 9.9.4 Private-Public Certificates When using public- key crypt ology for aut hent icat ion, each host has t wo keys. One key is public and can be m ade openly available. The ot her key is privat e and m ust be kept secure. These keys work like a handwrit t en signat ure ( in fact, cert ificat es are oft en referred t o as “ digit al signat ures” ) . Only you can writ e your signat ure exact ly as it should look.
Chapter 9 System 3 Double- click t he cert ificat e’s icon t o open t he Ce r t ifica t e window. Click t he D e t a ils t ab and scroll down t o t he Thum bpr int Algor it hm and Th um bpr int fields. Figure 56 Cert ificat e Det ails 4 114 Use a secure m et hod t o verify t hat t he cert ificat e owner has t he sam e inform at ion in t he Th um bpr in t Algor it h m and Th u m bpr in t fields. The secure m et hod m ay vary according t o your sit uat ion.
C HAPTER 10 Log Settings 10.1 Overview This chapt er provides inform at ion on viewing and generat ing logs on your NWA1121- NI . Logs are files t hat cont ain recorded net work act ivit y over a set period. They are used by adm inist rat ors t o m onit or t he healt h of t he syst em ( s) t hey are m anaging. Logs enable adm inist rat ors t o effect ively m onit or event s, errors, progress, et c. so t hat when net work problem s or syst em failures occur, t he cause or origin can be t raced.
Chapter 10 Log Settings 10.3 What You Need To Know Alerts and Logs An alert is a t ype of log t hat warrant s m ore serious at t ent ion. Som e cat egories such as Syst e m Er r or consist of bot h logs and alert s. You can different iat e t hem by t heir color in t he M onit or > Logs screen. Alert s are displayed in red and logs are displayed in black.
Chapter 10 Log Settings To change your NWA1121- NI ’s log set t ings, click Configu r a t ion > Log Se t t in gs. The screen appears as shown. Figure 58 Log Set t ings The following t able describes t he labels in t his screen. Table 36 Log Set t ings LABEL DESCRIPTION E- m ail Log Set t ings Mail Server Ent er t he server nam e or t he I P address of t he m ail server for t he e- m ail addresses specified below. I f t his field is left blank, logs and alert m essages will not be sent via e- m ail.
Chapter 10 Log Settings Table 36 Log Set t ings ( cont inued) LABEL DESCRIPTION SMTP Aut hent icat ion SMTP ( Sim ple Mail Transfer Prot ocol) is t he m essage- exchange st andard for t he I nt ernet . Select t he check box t o act ivat e SMTP aut hent icat ion. I f m ail server aut hent icat ion is needed but t his feat ure is disabled, you will not receive t he e- m ail logs. I f you use SMTP aut hent icat ion, t he m ail receiver should be t he owner of t he SMTP account .
C HAPTER 11 Maintenance 11.1 Overview This chapt er describes t he m aint enance screens. I t discusses how you can upload new firm ware, m anage configurat ion and rest art your NWA1121- NI wit hout t urning it off and on. This chapt er provides inform at ion and inst ruct ions on how t o ident ify and m anage your NWA1121NI over t he net work. Figure 59 NWA1121- NI Set up I n t he figure above, t he NWA1121- NI connect s t o a Dom ain Nam e Server ( DNS) server t o avail of a dom ain nam e.
Chapter 11 Maintenance • Use Re st a r t screen t o reboot t he NWA1121- NI wit hout t urning t he power off ( see Sect ion 11.9 on page 126) . 11.3 What You Need To Know You can find t he firm ware for your device at www.zyxel.com . I t is a file t hat ( usually) uses t he syst em m odel nam e wit h a " * .bin" ext ension, for exam ple " [ Model # ] .bin" . The upload process uses HTTP ( Hypert ext Transfer Prot ocol) and m ay t ake up t o t wo m inut es.
Chapter 11 Maintenance 11.5 Password Screen Use t his screen t o cont rol access t o your NWA1121- NI by assigning a password t o it . Click M a int e na nce > Pa ssw or d. The following screen displays. Figure 61 Maint enance > Password The following t able describes t he labels in t his screen. Table 38 Maint enance > Password LABEL DESCRIPTIONS Current Password Type in your exist ing syst em password. New Password Type your new syst em password.
Chapter 11 Maintenance 11.6 Time Screen Use t his screen t o change your NWA1121- NI ’s t im e and dat e, click M a int e n a n ce > Tim e . The following screen displays. Figure 62 Maint enance > Tim e The following t able describes t he labels in t his screen. Table 39 Maint enance > Tim e LABEL DESCRIPTION Current Tim e and Dat e Current Tim e This field displays t he t im e of your NWA1121- NI .
Chapter 11 Maintenance 11.7 Firmware Upgrade Screen Use t his screen t o upload a firm ware t o your NWA1121- NI . Click M a int e na nce > Fir m w a r e Upgr a de . Follow t he inst ruct ions in t his sect ion t o upload firm ware t o your NWA1121- NI . Figure 63 Maint enance > Firm ware Upgrade The following t able describes t he labels in t his screen.
Chapter 11 Maintenance Aft er t he upload was finished, log in again and check your new firm ware version in t he D a sh boa r d screen. I f t he upload was not successful, t he following screen will appear. Click Re t ur n t o go back t o t he F/ W Uploa d screen. Figure 66 Firm ware Upload Error 11.8 Configuration File Screen Use t his screen t o backup, rest ore and reset t he configurat ion of your NWA1121- NI . Click M a int e na nce > Con figu r a t ion File . The screen appears as shown next .
Chapter 11 Maintenance 11.8.2 Restore Configuration Rest ore configurat ion allows you t o upload a new or previously saved configurat ion file from your com put er t o your NWA1121- NI . Table 41 Rest ore Configurat ion LABEL DESCRIPTION File Pat h Type in t he locat ion of t he file you want t o upload in t his field or click Br ow se ... t o find it . Browse... Click Br ow se ... t o find t he file you want t o upload. Rem em ber t hat you m ust decom press com pressed ( .
Chapter 11 Maintenance I f t he upload was not successful, t he following screen will appear. Click Re t u r n t o go back t o t he Ba ck up/ Re st or e screen. Figure 70 Configurat ion Upload Error 11.8.3 Back to Factory Defaults Pressing t he Re se t but t on in t his sect ion clears all user- ent ered configurat ion inform at ion and ret urns t he NWA1121- NI t o it s fact ory default s as shown on t he screen. The following warning screen will appear.
Chapter 11 Maintenance NWA1121-NI User’s Guide 127
Chapter 11 Maintenance 128 NWA1121-NI User’s Guide
C HAPTER 12 Troubleshooting This chapt er offers som e suggest ions t o solve problem s you m ight encount er. The pot ent ial problem s are divided int o t he following cat egories. • Power, Hardware Connect ions, and LEDs • NWA1121- NI Access and Login • I nt ernet Access 12.1 Power, Hardware Connections, and LEDs The NWA1121- NI does not t urn on. None of t he LEDs t urn on. 1 Make sure you are using t he power adapt or or cord included wit h t he NWA1121- NI .
Chapter 12 Troubleshooting 12.2 NWA1121-NI Access and Login I forgot t he I P address for t he NWA1121- NI . 1 The default I P address is 1 9 2 .1 6 8 .1 .2 . 2 I f you changed t he I P address and have forgot t en it , you m ight get t he I P address of t he NWA1121NI by looking up t he I P address of t he default gat eway for your com put er. To do t his in m ost Windows com put ers, click St a r t > Run , ent er “ cm d”, and t hen ent er “ ipconfig”.
Chapter 12 Troubleshooting 6 I f t he problem cont inues, cont act t he net work adm inist rat or or vendor, or t ry one of t he advanced suggest ions. Adva n ce d Sugge st ions • Try t o access t he NWA1121- NI using anot her service, such as Telnet . I f you can access t he NWA1121- NI , check t he rem ot e m anagem ent set t ings t o find out why t he NWA1121- NI does not respond t o HTTP. • I f your com put er is connect ed wirelessly, use a com put er t hat is connect ed t o a LAN/ Et hernet port .
Chapter 12 Troubleshooting 5 I f t he problem cont inues, cont act your I SP. I cannot access t he I nt ernet anym ore. I had access t o t he I nt ernet ( wit h t he NWA1121- NI ) , but m y I nt ernet connect ion is not available anym ore. 1 Check t he hardware connect ions, and m ake sure t he LEDs are behaving as expect ed. See t he Quick St art Guide and Sect ion 1.7 on page 17. 2 Reboot t he NWA1121- NI . 3 I f t he problem cont inues, cont act your I SP or net work adm inist rat or.
A PPENDIX A Setting Up Your Computer’s IP Address Not e: Your specific NWA1121- NI m ay not support all of t he operat ing syst em s described in t his appendix. See t he product specificat ions for m ore inform at ion about which operat ing syst em s are support ed. This appendix shows you how t o configure t he I P set t ings on your com put er in order for it t o be able t o com m unicat e wit h t he ot her devices on your net work.
Appendix A Setting Up Your Computer’s IP Address 134 1 Click St a r t > Con t r ol Pa n e l. 2 I n t he Cont r ol Pa n e l, click t he N e t w or k Con ne ct ion s icon. 3 Right- click Loca l Ar e a Conne ct ion and t hen select Pr ope r t ie s.
Appendix A Setting Up Your Computer’s IP Address 4 On t he Ge n e r a l t ab, select I n t e r n e t Pr ot ocol ( TCP/ I P) and t hen click Pr ope r t ie s.
Appendix A Setting Up Your Computer’s IP Address 5 The I nt e r ne t Pr ot ocol TCP/ I P Pr ope r t ie s window opens. 6 Select Obt a in a n I P a ddr e ss a ut om a t ica lly if your net work adm inist rat or or I SP assigns your I P address dynam ically. Select Use t h e follow in g I P Addr e ss and fill in t he I P a ddr e ss, Subn e t m a sk , and D e fa ult ga t e w a y fields if you have a st at ic I P address t hat was assigned t o you by your net work adm inist rat or or I SP.
Appendix A Setting Up Your Computer’s IP Address Windows Vista This sect ion shows screens from Windows Vist a Professional. 1 Click St a r t > Cont r ol Pa n e l. 2 I n t he Cont r ol Pa n e l, click t he N e t w or k a nd I n t e r n e t icon. 3 Click t he N e t w or k a n d Sh a r ing Ce n t e r icon.
Appendix A Setting Up Your Computer’s IP Address 4 Click M a n a ge n e t w or k con n e ct ions. 5 Right- click Loca l Ar e a Conne ct ion and t hen select Pr ope r t ie s. Not e: During t his procedure, click Con t inu e whenever Windows displays a screen saying t hat it needs your perm ission t o cont inue.
Appendix A Setting Up Your Computer’s IP Address 6 Select I n t e r n e t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) and t hen select Pr ope r t ie s.
Appendix A Setting Up Your Computer’s IP Address 7 The I nt e r ne t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) Pr ope r t ie s window opens. 8 Select Obt a in a n I P a ddr e ss a ut om a t ica lly if your net work adm inist rat or or I SP assigns your I P address dynam ically. Select Use t h e follow in g I P Addr e ss and fill in t he I P a ddr e ss, Subn e t m a sk , and D e fa ult ga t e w a y fields if you have a st at ic I P address t hat was assigned t o you by your net work adm inist rat or or I SP.
Appendix A Setting Up Your Computer’s IP Address Windows 7 This sect ion shows screens from Windows 7 Ent erprise. 1 Click St a r t > Cont r ol Pa n e l. 2 I n t he Cont r ol Pa n e l, click Vie w ne t w or k st a t us a nd t a sk s under t he N e t w or k a n d I n t e r n e t cat egory. 3 Click Ch a n ge a da pt e r se t t in gs.
Appendix A Setting Up Your Computer’s IP Address 4 Double click Loca l Ar e a Conne ct ion and t hen select Pr ope r t ie s. Not e: During t his procedure, click Con t inu e whenever Windows displays a screen saying t hat it needs your perm ission t o cont inue.
Appendix A Setting Up Your Computer’s IP Address 5 Select I n t e r n e t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) and t hen select Pr ope r t ie s.
Appendix A Setting Up Your Computer’s IP Address 6 The I nt e r ne t Pr ot ocol Ve r sion 4 ( TCP/ I Pv4 ) Pr ope r t ie s window opens. 7 Select Obt a in a n I P a ddr e ss a ut om a t ica lly if your net work adm inist rat or or I SP assigns your I P address dynam ically. Select Use t h e follow in g I P Addr e ss and fill in t he I P a ddr e ss, Subn e t m a sk , and D e fa ult ga t e w a y fields if you have a st at ic I P address t hat was assigned t o you by your net work adm inist rat or or I SP.
Appendix A Setting Up Your Computer’s IP Address 3 The I P set t ings are displayed as follows. Mac OS X: 10.3 and 10.4 The screens in t his sect ion are from Mac OS X 10.4 but can also apply t o 10.3. 1 Click Apple > Syst e m Pr e fe r e nce s.
Appendix A Setting Up Your Computer’s IP Address 146 2 I n t he Syst e m Pr e fe r e nce s window, click t he N e t w or k icon. 3 When t he N e t w or k preferences pane opens, select Built - in Et he r ne t from t he net work connect ion t ype list , and t hen click Configu r e .
Appendix A Setting Up Your Computer’s IP Address 4 For dynam ically assigned set t ings, select Usin g D H CP from t he Configu r e I Pv4 list in t he TCP/ I P t ab. 5 For st at ically assigned set t ings, do t he following: • From t he Configu r e I Pv4 list , select M a nua lly. • I n t he I P Addr e ss field, t ype your I P address. • I n t he Subn e t M a sk field, t ype your subnet m ask. • I n t he Rou t e r field, t ype t he I P address of your device. 6 Click Apply N ow and close t he window.
Appendix A Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/ I P propert ies by clicking Applica t ions > Ut ilit ie s > N e t w or k Ut ilit ie s, and t hen select ing t he appropriat e N e t w or k I nt e r fa ce from t he I n fo t ab. Figure 73 Mac OS X 10.4: Net work Ut ilit y Mac OS X: 10.5 and 10.6 The screens in t his sect ion are from Mac OS X 10.5 but can also apply t o 10.6. 1 148 Click Apple > Syst e m Pr e fe r e nce s.
Appendix A Setting Up Your Computer’s IP Address 2 I n Syst e m Pr e fe r e n ce s, click t he N e t w or k icon. 3 When t he N e t w or k preferences pane opens, select Et he r ne t from t he list of available connect ion t ypes. 4 From t he Configu r e list , select Usin g D H CP for dynam ically assigned set t ings.
Appendix A Setting Up Your Computer’s IP Address • From t he Configu r e list , select M a nua lly. • I n t he I P Addr e ss field, ent er your I P address. • I n t he Subn e t M a sk field, ent er your subnet m ask. • I n t he Rou t e r field, ent er t he I P address of your NWA1121- NI . 6 150 Click Apply and close t he window.
Appendix A Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/ I P propert ies by clicking Applica t ions > Ut ilit ie s > N e t w or k Ut ilit ie s, and t hen select ing t he appropriat e N e t w or k int e r fa ce from t he I nfo t ab. Figure 74 Mac OS X 10.5: Net work Ut ilit y Linux: Ubuntu 8 (GNOME) This sect ion shows you how t o configure your com put er ’s TCP/ I P set t ings in t he GNU Obj ect Model Environm ent ( GNOME) using t he Ubunt u 8 Linux dist ribut ion.
Appendix A Setting Up Your Computer’s IP Address 152 2 When t he N e t w or k Se t t in gs window opens, click Un lock t o open t he Aut he nt ica t e window. ( By default , t he Unlock but t on is greyed out unt il clicked.) You cannot m ake changes t o your configurat ion unless you first ent er your adm in password. 3 I n t he Aut he nt ica t e window, ent er your adm in account nam e and password t hen click t he Aut he nt ica t e but t on.
Appendix A Setting Up Your Computer’s IP Address 4 I n t he N e t w or k Se t t ings window, select t he connect ion t hat you want t o configure, t hen click Pr ope r t ie s. 5 The Pr ope r t ie s dialog box opens. • I n t he Configu r a t ion list , select Au t om a t ic Con figu r a t ion ( D H CP) if you have a dynam ic I P address. • I n t he Configur a t ion list , select St a t ic I P a ddr e ss if you have a st at ic I P address.
Appendix A Setting Up Your Computer’s IP Address 154 7 I f you know your DNS server I P address( es) , click t he D N S t ab in t he N e t w or k Se t t in gs window and t hen ent er t he DNS server inform at ion in t he fields provided. 8 Click t he Close but t on t o apply t he changes.
Appendix A Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/ I P propert ies by clicking Syst e m > Adm in ist r a t ion > N e t w or k Tools, and t hen select ing t he appropriat e N e t w or k de vice from t he D e vice s t ab. The I n t e r fa ce St a t ist ics colum n shows dat a if your connect ion is working properly. Figure 75 Ubunt u 8: Net work Tools Linux: openSUSE 10.
Appendix A Setting Up Your Computer’s IP Address 156 1 Click K M e n u > Com pu t e r > Adm in ist r a t or Se t t in gs ( Ya ST) . 2 When t he Run a s Root - KD E su dialog opens, ent er t he adm in password and click OK.
Appendix A Setting Up Your Computer’s IP Address 3 When t he Ya ST Cont r ol Ce nt e r window opens, select N e t w or k D e vice s and t hen click t he N e t w or k Ca r d icon. 4 When t he N e t w or k Se t t in gs window opens, click t he Ove r vie w t ab, select t he appropriat e connect ion N a m e from t he list , and t hen click t he Configu r e but t on.
Appendix A Setting Up Your Computer’s IP Address 5 When t he N e t w or k Ca r d Se t u p window opens, click t he Addr e ss t ab Figure 76 openSUSE 10.3: Net work Card Set up 6 Select D yna m ic Addr e ss ( D H CP) if you have a dynam ic I P address. Select St a t ica lly a ssign e d I P Addr e ss if you have a st at ic I P address. Fill in t he I P a ddr e ss, Subne t m a sk , and H ost na m e fields. 7 158 Click N e x t t o save t he changes and close t he N e t w or k Ca r d Se t up window.
Appendix A Setting Up Your Computer’s IP Address 8 I f you know your DNS server I P address( es) , click t he H ost na m e / D N S t ab in N e t w or k Se t t in gs and t hen ent er t he DNS server inform at ion in t he fields provided. 9 Click Finish t o save your set t ings and close t he window. Verifying Settings Click t he KN e t w or k M a na ge r icon on t he Ta sk ba r t o check your TCP/ I P propert ies. From t he Opt ion s sub- m enu, select Sh ow Con n e ct ion I n for m a t ion .
Appendix A Setting Up Your Computer’s IP Address When t he Conn e ct ion St a t u s - KN e t w or k M a n a ge r window opens, click t he St a t ist ics t a b t o see if your connect ion is working properly.
A PPENDIX B Pop-up Windows, JavaScript and Java Permissions I n order t o use t he web configurat or you need t o allow: • Web browser pop- up windows from your device. • JavaScript ( enabled by default ) . • Java perm issions ( enabled by default ) . Not e: The screens used below belong t o I nt ernet Explorer version 6, 7 and 8. Screens for ot her I nt ernet Explorer versions m ay vary. Internet Explorer Pop-up Blockers You m ay have t o disable pop- up blocking t o log int o your device.
Appendix B Pop-up Windows, JavaScript and Java Permissions 2 Clear t he Block pop- ups check box in t he Pop- u p Block e r sect ion of t he screen. This disables any web pop- up blockers you m ay have enabled. Figure 80 I nt ernet Opt ions: Privacy 3 Click Apply t o save t his set t ing. Enable Pop-up Blockers with Exceptions Alt ernat ively, if you only want t o allow pop- up windows from your device, see t he following st eps.
Appendix B Pop-up Windows, JavaScript and Java Permissions 2 Select Se t t ings…t o open t he Pop- up Block e r Se t t ings screen. Figure 81 I nt ernet Opt ions: Privacy 3 Type t he I P address of your device ( t he web page t hat you do not want t o have blocked) wit h t he prefix “ ht t p: / / ”. For exam ple, ht t p: / / 192.168.167.1.
Appendix B Pop-up Windows, JavaScript and Java Permissions 4 Click Add t o m ove t he I P address t o t he list of Allow e d sit e s. Figure 82 Pop- up Blocker Set t ings 5 Click Close t o ret urn t o t he Pr iva cy screen. 6 Click Apply t o save t his set t ing. JavaScript I f pages of t he web configurat or do not display properly in I nt ernet Explorer, check t hat JavaScript are allowed.
Appendix B Pop-up Windows, JavaScript and Java Permissions 1 I n I nt ernet Explorer, click Tools, I n t e r ne t Opt ion s and t hen t he Se cur it y t ab. Figure 83 I nt ernet Opt ions: Securit y 2 Click t he Cu st om Le ve l... but t on. 3 Scroll down t o Scr ipt ing. 4 Under Act ive scr ipt ing m ake sure t hat Ena ble is select ed ( t he default ) . 5 Under Scr ipt ing of Ja va a pple t s m ake sure t hat Ena ble is select ed ( t he default ) .
Appendix B Pop-up Windows, JavaScript and Java Permissions 6 Click OK t o close t he window. Figure 84 Securit y Set t ings - Java Script ing Java Permissions 166 1 From I nt ernet Explorer, click Tools, I nt e r ne t Opt ions and t hen t he Se cu r it y t ab. 2 Click t he Cu st om Le ve l... but t on. 3 Scroll down t o M icr osoft VM . 4 Under Ja va pe r m issions m ake sure t hat a safet y level is select ed.
Appendix B Pop-up Windows, JavaScript and Java Permissions 5 Click OK t o close t he window. Figure 85 Securit y Set t ings - Java JAVA (Sun) 1 From I nt ernet Explorer, click Tools, I nt e r ne t Opt ions and t hen t he Adva n ce d t ab. 2 Make sure t hat Use Ja va 2 for < a pple t > under Ja va ( Sun) is select ed.
Appendix B Pop-up Windows, JavaScript and Java Permissions 3 Click OK t o close t he window. Figure 86 Java ( Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for ot her versions m ay vary slight ly. The st eps below apply t o Mozilla Firefox 3.0 as well. You can enable Java, Javascript and pop- ups in one screen. Click Tools, t hen click Opt ions in t he screen t hat appears.
Appendix B Pop-up Windows, JavaScript and Java Permissions Click Cont e n t t o show t he screen below. Select t he check boxes as shown in t he following screen. Figure 88 Mozilla Firefox Cont ent Securit y Opera Opera 10 screens are used here. Screens for ot her versions m ay vary slight ly.
Appendix B Pop-up Windows, JavaScript and Java Permissions Allowing Pop-Ups From Opera, click Tools, t hen Pr e fe r e nce s. I n t he Ge n e r a l t ab, go t o Ch oose h ow you pr e fe r t o h a n dle pop- ups and select Ope n a ll pop- ups. Figure 89 Opera: Allowing Pop- Ups Enabling Java From Opera, click Tools, t hen Pr e fe r e nce s. I n t he Adva nce d t ab, select Cont e nt from t he leftside m enu. Select t he check boxes as shown in t he following screen.
Appendix B Pop-up Windows, JavaScript and Java Permissions To cust om ize JavaScript behavior in t he Opera browser, click Ja va Scr ipt Opt ions. Figure 91 Opera: JavaScript Opt ions Select t he it em s you want Opera’s JavaScript t o apply.
Appendix B Pop-up Windows, JavaScript and Java Permissions 172 NWA1121-NI User’s Guide
A PPENDIX C IP Addresses and Subnetting This appendix int roduces I P addresses and subnet m asks. I P addresses ident ify individual devices on a net work. Every net working device ( including com put ers, servers, rout ers, print ers, et c.) needs an I P address t o com m unicat e across t he net work. These net working devices are also known as host s. Subnet m asks det erm ine t he m axim um num ber of possible host s on a net work.
Appendix C IP Addresses and Subnetting The following figure shows an exam ple I P address in which t he first t hree oct et s ( 192.168.1) are t he net work num ber, and t he fourt h oct et ( 16) is t he host I D. Figure 92 Net work Num ber and Host I D How m uch of t he I P address is t he net work num ber and how m uch is t he host I D varies according t o t he subnet m ask.
Appendix C IP Addresses and Subnetting Subnet m asks can be referred t o by t he size of t he net work num ber part ( t he bit s wit h a “ 1” value) . For exam ple, an “ 8- bit m ask” m eans t hat t he first 8 bit s of t he m ask are ones and t he rem aining 24 bit s are zeroes. Subnet m asks are expressed in dot t ed decim al not at ion j ust like I P addresses. The following exam ples show t he binary and decim al not at ion for 8- bit , 16- bit , 24- bit and 29- bit subnet m asks.
Appendix C IP Addresses and Subnetting The following t able shows som e possible subnet m asks using bot h not at ions. Table 45 Alt ernat ive Subnet Mask Not at ion SUBNET MASK ALTERNATIVE NOTATION LAST OCTET (BINARY) LAST OCTET (DECIMAL) 255.255.255.0 / 24 0000 0000 0 255.255.255.128 / 25 1000 0000 128 255.255.255.192 / 26 1100 0000 192 255.255.255.224 / 27 1110 0000 224 255.255.255.240 / 28 1111 0000 240 255.255.255.248 / 29 1111 1000 248 255.255.255.
Appendix C IP Addresses and Subnetting The following figure shows t he com pany net work aft er subnet t ing. There are now t wo subnet works, A and B. Figure 94 Subnet t ing Exam ple: Aft er Subnet t ing I n a 25- bit subnet t he host I D has 7 bit s, so each sub- net work has a m axim um of 2 7 – 2 or 126 possible host s ( a host I D of all zeroes is t he subnet ’s address it self, all ones is t he subnet ’s broadcast address) . 192.168.1.0 wit h m ask 255.255.255.128 is subnet A it self, and 192.168.1.
Appendix C IP Addresses and Subnetting Table 46 Subnet 1 ( cont inued) IP/SUBNET MASK NETWORK NUMBER Subnet Address: 192.168.1.0 Lowest Host I D: 192.168.1.1 Broadcast Address: 192.168.1.63 Highest Host I D: 192.168.1.62 LAST OCTET BIT VALUE Table 47 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE I P Address 192.168.1. 64 I P Address ( Binary) 11000000.10101000.00000001. 0 1 000000 Subnet Mask ( Binary) 11111111.11111111.11111111. 1 1 000000 Subnet Address: 192.168.1.
Appendix C IP Addresses and Subnetting The following t able shows I P address last oct et values for each subnet . Table 50 Eight Subnet s SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1 0 1 30 31 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 254 255 Subnet Planning The following t able is a sum m ary for subnet planning on a net work wit h a 24- bit net work num ber.
Appendix C IP Addresses and Subnetting Table 52 16- bit Net work Num ber Subnet Planning ( cont inued) NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 13 255.255.255.248 ( / 29) 8192 6 14 255.255.255.252 ( / 30) 16384 2 15 255.255.255.254 ( / 31) 32768 1 Configuring IP Addresses Where you obt ain your net work num ber depends on your part icular sit uat ion.
A PPENDIX D Wireless LANs Wireless LAN Topologies This sect ion discusses ad- hoc and infrast ruct ure wireless LAN t opologies. Ad-hoc Wireless LAN Configuration The sim plest WLAN configurat ion is an independent ( Ad- hoc) WLAN t hat connect s a set of com put ers wit h wireless adapt ers ( A, B, C) .
Appendix D Wireless LANs disabled, wireless client A and B can st ill access t he wired net work but cannot com m unicat e wit h each ot her. Figure 96 Basic Service Set ESS An Ext ended Service Set ( ESS) consist s of a series of overlapping BSSs, each cont aining an access point , wit h each access point connect ed t oget her by a wired net work. This wired connect ion bet ween APs is called a Dist ribut ion Syst em ( DS) . This t ype of wireless LAN t opology is called an I nfrast ruct ure WLAN.
Appendix D Wireless LANs An ESSI D ( ESS I Dent ificat ion) uniquely ident ifies each ESS. All access point s and t heir associat ed wireless client s wit hin t he sam e ESS m ust have t he sam e ESSI D in order t o com m unicat e. Figure 97 I nfrast ruct ure WLAN Channel A channel is t he radio frequency( ies) used by wireless devices t o t ransm it and receive dat a. Channels available depend on your geographical area.
Appendix D Wireless LANs cannot " hear" each ot her, t hat is t hey do not know if t he channel is current ly being used. Therefore, t hey are considered hidden from each ot her. Figure 98 RTS/ CTS When st at ion A sends dat a t o t he AP, it m ight not know t hat t he st at ion B is already using t he channel.
Appendix D Wireless LANs I f t he Fr a gm e nt a t ion Thr e shold value is sm aller t han t he RTS/ CTS value ( see previously) you set t hen t he RTS ( Request To Send) / CTS ( Clear t o Send) handshake will never occur as dat a fram es will be fragm ent ed before t hey reach RTS/ CTS size. Preamble Type Pream ble is used t o signal t hat dat a is com ing t o t he receiver. Short and long refer t o t he lengt h of t he synchronizat ion field in a packet .
Appendix D Wireless LANs The following figure shows t he relat ive effect iveness of t hese wireless securit y m et hods available on your NWA1121- NI . Table 54 Wireless Securit y Levels SECURITY LEVEL Least Secure SECURITY TYPE Unique SSI D ( Default ) Unique SSI D wit h Hide SSI D Enabled MAC Address Filt ering WEP Encrypt ion I EEE802.
Appendix D Wireless LANs RADI US is a sim ple package exchange in which your AP act s as a m essage relay bet ween t he wireless client and t he net work RADI US server. Types of RADIUS Messages The following t ypes of RADI US m essages are exchanged bet ween t he access point and t he RADI US server for user aut hent icat ion: • Access- Request Sent by an access point request ing aut hent icat ion. • Access- Rej ect Sent by a RADI US server rej ect ing access.
Appendix D Wireless LANs EAP-MD5 (Message-Digest Algorithm 5) MD5 aut hent icat ion is t he sim plest one- way aut hent icat ion m et hod. The aut hent icat ion server sends a challenge t o t he wireless client . The wireless client ‘proves’ t hat it knows t he password by encrypt ing t he password wit h t he challenge and sends back t he inform at ion. Password is not sent in plain t ext . However, MD5 aut hent icat ion has som e weaknesses.
Appendix D Wireless LANs I f t his feat ure is enabled, it is not necessary t o configure a default encrypt ion key in t he wireless securit y configurat ion screen. You m ay st ill configure and st ore keys, but t hey will not be used while dynam ic WEP is enabled. Not e: EAP- MD5 cannot be used wit h Dynam ic WEP Key Exchange For added securit y, cert ificat e- based aut hent icat ions ( EAP-TLS, EAP-TTLS and PEAP) use dynam ic keys for dat a encrypt ion.
Appendix D Wireless LANs called Rij ndael. They bot h include a per- packet key m ixing funct ion, a Message I nt egrit y Check ( MI C) nam ed Michael, an ext ended init ializat ion vect or ( I V) wit h sequencing rules, and a re- keying m echanism . WPA and WPA2 regularly change and rot at e t he encrypt ion keys so t hat t he sam e encrypt ion key is never used t wice.
Appendix D Wireless LANs WPA(2) with RADIUS Application Example To set up WPA( 2) , you need t he I P address of t he RADI US server, it s port num ber ( default is 1812) , and t he RADI US shared secret . A WPA( 2) applicat ion exam ple wit h an ext ernal RADI US server looks as follows. " A" is t he RADI US server. " DS" is t he dist ribut ion syst em . 1 The AP passes t he wireless client 's aut hent icat ion request t o t he RADI US server.
Appendix D Wireless LANs 4 The AP and wireless client s use t he TKI P or AES encrypt ion process, t he PMK and inform at ion exchanged in a handshake t o creat e t em poral encrypt ion keys. They use t hese keys t o encrypt dat a exchanged bet ween t hem . Figure 100 WPA( 2) - PSK Aut hent icat ion Security Parameters Summary Refer t o t his t able t o see what ot her securit y param et ers you should configure for each aut hent icat ion m et hod or key m anagem ent prot ocol t ype.
Appendix D Wireless LANs Posit ioning t he ant ennas properly increases t he range and coverage area of a wireless LAN. Antenna Characteristics Frequency An ant enna in t he frequency of 2.4GHz or 5GHz is needed t o com m unicat e efficient ly in a wireless LAN Radiation Pattern A radiat ion pat t ern is a diagram t hat allows you t o visualize t he shape of t he ant enna’s coverage area. Antenna Gain Ant enna gain, m easured in dB ( decibel) , is t he increase in coverage wit hin t he RF beam widt h.
Appendix D Wireless LANs For direct ional ant ennas, point t he ant enna in t he direct ion of t he desired coverage area.
A PPENDIX E Legal Information Copyright Copyright © 2012 by ZyXEL Com m unicat ions Corporat ion. The cont ent s of t his publicat ion m ay not be reproduced in any part or as a whole, t ranscribed, st ored in a ret rieval syst em , t ranslat ed int o any language, or t ransm it t ed in any form or by any m eans, elect ronic, m echanical, m agnet ic, opt ical, chem ical, phot ocopying, m anual, or ot herwise, wit hout t he prior writ t en perm ission of ZyXEL Com m unicat ions Corporat ion.
Appendix E Legal Information • This device m ust accept any int erference received, including int erference t hat m ay cause undesired operat ions. This device has been t est ed and found t o com ply wit h t he lim it s for a Class B digit al device pursuant t o Part 15 of t he FCC Rules. These lim it s are designed t o provide reasonable prot ect ion against harm ful int erference in a resident ial inst allat ion.
Appendix E Legal Information Ant enna having a higher gain is st rict ly prohibit ed per regulat ions of I ndust ry Canada. The required ant enna im pedance is 50 ohm s. To reduce pot ent ial radio int erference t o ot her users, t he ant enna t ype and it s gain should be so chosen t hat t he EI RP is not m ore t han required for successful com m unicat ion.
Appendix E Legal Information PRODUCT COMPLI ES WI TH 21 CFR 1040.10 AND 1040.11. PRODUI T CONFORME SELON 21 CFR 1040.10 ET 1040.11. Viewing Certifications 1 Go t o ht t p: / / www.zyxel.com . 2 Select your product on t he ZyXEL hom e page t o go t o t hat product 's page. 3 Select t he cert ificat ion you wish t o view from t his page.
Appendix E Legal Information Regulatory Information European Union The following inform at ion applies if you use t he product wit hin t he European Union. Declaration of Conformity with Regard to EU Directive 1999/5/EC (R&TTE Directive) Com pliance I nform at ion for 2.
Appendix E Legal Information [ Finnish] ZyXEL vakuut t aa t ät en et t ä lait t eet t yyppinen lait e on direkt iivin 1999/ 5/ EY oleellist en vaat im ust en j a sit ä koskevien direkt iivin m uiden eht oj en m ukainen. [ Swedish] Härm ed int ygar ZyXEL at t denna ut rust ning st år I överensst äm m else m ed de väsent liga egenskapskrav och övriga relevant a best äm m elser som fram går av direkt iv 1999/ 5/ EC.
Appendix E Legal Information The Belgian I nst it ut e for Post al Services and Telecom m unicat ions ( BI PT) m ust be not ified of any out door wireless link having a range exceeding 300 m et ers. Please check ht t p: / / www.bipt .be for m ore det ails. Draadloze verbindingen voor buit engebruik en m et een reikwij dt e van m eer dan 300 m et er dienen aangem eld t e worden bij het Belgisch I nst it uut voor post dienst en en t elecom m unicat ie ( BI PT) . Zie ht t p: / / www.bipt .
Appendix E Legal Information 2.4 GHz frekvenèu j oslas izm ant oðanai ârpus t elpâm nepiecieðam a at ïauj a no Elekt ronisko sakaru direkcij as. Vairâk inform âcij as: ht t p: / / www.esd.lv. Not es: 1. Alt hough Norway, Swit zerland and Liecht enst ein are not EU m em ber st at es, t he EU Direct ive 1999/ 5/ EC has also been im plem ent ed in t hose count ries. 2. The regulat ory lim it s for m axim um out put power are specified in EI RP.
Index Index Numbers BSS 12, 56, 181 802.1x- Only 58 802.1x- St at ic128 58 C 802.1x- St at ic64 58 CA 188 A access privileges 12 Account ing Server 88 Cert ificat e aut hent icat ion 104 file form at 104 Cert ificat e Aut horit y See CA. Alert s 116 Cert ificat es Fingerprint 113 MD5 113 public key 104 SHA1 113 Alt ernat ive subnet m ask not at ion 176 Cert ificat ion Aut horit y 113 Ant enna 92 cert ificat ions 195 not ices 197 viewing 198 Advanced Encrypt ion St andard See AES.
Index E I m port Cert ificat e 106 EAP 59 I ndependent Basic Service Set See I BSS 181 EAP Aut hent icat ion 187 init ializat ion vect or ( I V) 190 Encrypt ion 59, 76, 80, 83, 85 I nt ernet Assigned Num bers Aut horit y See I ANA encrypt ion 14, 189 ESS 56, 182 Et hernet device 89 Ext ended Service Set 56 Ext ended Service Set , See ESS 182 Ext ensible Aut hent icat ion Prot ocol 59 F Fact ory Default s 126 rest oring 21 FCC int erference st at em ent 195 Firm ware 120 I nt ernet Prot ocol versi
Index M PFX PKCS# 12 104 Pream ble 91 MAC Filt er Allow Associat ion 89 Deny Associat ion 89 Maint enance 119 Associat ion List 120 Backup 124 Rest ore 125 Managem ent I nform at ion Base ( MI B) 111 m anaging t he device using Telnet . See com m and int erface. using t he com m and int erface. See com m and int erface.
Index Tim e and Dat e Set up 122 Tim e Zone 122 S Securit y Mode, Choosing t he 93 Securit y Modes 802.1x- St at ic64 58 I EEE 802.1x- Only 58 I EEE 802.1x- St at ic128 58 I EEE 802.
Index RTS/ CTS Threshold 91 SSI D 56 Wireless Client Mode 67 Wireless Mode 57 WMM QoS 91 W warrant y 198 not e 198 WDS 14 Web Configurat or 19 password 19 WEP 58 WEP key encrypt ing 93 Wi- Fi Mult im edia QoS 92 Wi- Fi Prot ect ed Access 58, 189 Wired Equivalent Privacy 58 Wireless Client 42 wireless client WPA supplicant s 190 Wireless Dist ribut ion Syst em ( WDS) 14 Wireless Mode 57 Wireless Mode, Choosing t he Access Point 29 Bridge 29 Wireless Client 29 Wireless Securit y 16 how t o im prove 16 Level
Index 208 NWA1121-NI User’s Guide
