User’s Guide WAX650S 802.11 ax (WiFi 6) Dual-Radio Unified Pro Access Point Default Login Details LAN IP Address User Name Password Version 6.00 Edition 1, 09/2019 DHCP-assigned OR http://192.168.1.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product hardware, firmware, or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • All models in this series may be referred to as the “Zyxel Device” in this guide. • Product labels, screen names, field labels and field choices are all in bold font.
Contents Overview Contents Overview Introduction ........................................................................................................................................... 13 AP Management .................................................................................................................................. 24 Hardware ...............................................................................................................................................
Table of Contents Table of Contents Document Conventions ..................................................................................................................... 3 Contents Overview ............................................................................................................................ 4 Table of Contents ................................................................................................................................ 5 Chapter 1 Introduction .................
Table of Contents 3.3 Zyxel Device Models With Multiple LEDs ...................................................................................... 42 3.3.1 NWA1123-AC PRO ................................................................................................................ 42 3.3.2 NWA1302-AC ......................................................................................................................... 44 3.3.3 WAC6502D-E, WAC6502D-S, and WAC6503D-S ....................................
Table of Contents 8.1 Overview ......................................................................................................................................... 80 8.1.1 What You Can Do in this Chapter ....................................................................................... 80 8.2 What You Need to Know ............................................................................................................... 80 8.3 Network Status ..................................................
Table of Contents Chapter 12 User................................................................................................................................................... 124 12.1 Overview ..................................................................................................................................... 124 12.1.1 What You Can Do in this Chapter ................................................................................... 124 12.1.2 What You Need To Know ..................
Table of Contents 16.1 Overview ..................................................................................................................................... 156 16.1.1 What You Can Do in this Chapter ................................................................................... 156 16.1.2 What You Need to Know ................................................................................................. 156 16.1.3 Verifying a Certificate ....................................................
Table of Contents 18.1 Overview ..................................................................................................................................... 196 18.1.1 What You Can Do In this Chapter ................................................................................... 196 18.2 Email Daily Report ....................................................................................................................... 196 18.3 Log Setting .................................................
Table of Contents 23.2 Reboot ......................................................................................................................................... 226 Chapter 24 Shutdown ......................................................................................................................................... 227 24.1 Overview ..................................................................................................................................... 227 24.1.
Table of Contents Appendix D Legal Information ...................................................................................................... 283 Index ................................................................................................................................................
CHAPTER 1 Introduction 1.1 Overview This User’s Guide covers the models listed in the following table. They can be managed in one of the following methods: remote management through Nebula Control Center (NCC) or an AP Controller (AC) such as the NXC, or local management in Standalone Mode. Each Zyxel Device runs in standalone mode by default, but it is recommended to use NCC management if it is available for your device.
Chapter 1 Introduction • Wireless repeater - A wireless repeater wirelessly connects to a root AP and extends the network’s wireless range. The following figure shows a network setup that uses these different roles to create a secure Wireless Distribution System (WDS). The root AP (Y) is connected to a network with Internet access and has a wireless repeater (X) connected to it to expand the wireless network’s range.
Chapter 1 Introduction wireless clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP through repeaters Z and Y. Figure 2 Repeater Application When the Zyxel Device is in Repeater mode, repeater security between the Zyxel Device and other repeater is independent of the security between the wireless clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section 10.2 on page 107 and Section 15.
Chapter 1 Introduction managed by the NXC (see Section 2.1.3 on page 25). If the Zyxel Device’s radio setting is set to MON Mode (RF Monitor mode), it will serve as a dedicated RF monitor and its AP clients are disconnected. The models that do not support MON Mode support Rogue AP Detection (see Section 10.3 on page 110). Rogue AP Detection allows the AP to scan all channels similar to MON Mode except that the Zyxel Device still works as an AP while it scans the environment for wireless signals.
Chapter 1 Introduction 6 Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP. 7 To quarantine a rogue AP, go to CONFIGURATION > Wireless > Rogue AP, select the APs you want to quarantine, and click Containment. Make sure the Enable Rogue AP Containment check box is selected, and click Apply. 1.3 Sample Feature Applications This section describes some possible scenarios and topologies that you can set up using your Zyxel Device. 1.3.
Chapter 1 Introduction Figure 3 Multiple BSSs 1.3.2 Dual-Radio Some of the Zyxel Device models are equipped with dual wireless radios. This means you can configure two different wireless networks to operate simultaneously. Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference. You could use the 2.
Chapter 1 Introduction Figure 4 Dual-Radio Application 1.4 Zyxel Device Product Feature Comparison The following tables show the differences between each Zyxel Device model. Table 1 Zyxel Device 1000/5000 Series Comparison Table FEATURES Supported Wireless Standards Supported Frequency Bands NWA1123ACV2 NWA1123AC PRO NWA1123AC HD NWA1123 AX NWA1302AC NWA5123AC NWA5123AC HD WAC5302 D-S IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11a IEEE 802.
Chapter 1 Introduction Table 1 Zyxel Device 1000/5000 Series Comparison Table NWA1123ACV2 NWA1123AC PRO NWA1123AC HD NWA1123 AX NWA1302AC NWA5123AC NWA5123AC HD WAC5302 D-S Number of Wireless Radios 2 2 2 2 2 2 2 2 Monitor Mode & Rogue APs ContainmentA No No No No No Yes No No Rogue AP Detection Yes Yes Yes Yes Yes Yes Yes Yes WDS (Wireless Distribution System) - Root AP & Repeater Modes Yes Yes No No No Yes No No Tunnel Forwarding Mode No No No Yes No No
Chapter 1 Introduction A. For NXC managed devices only. See the NXC User’s Guide for details. Table 2 WAC 6000 Series Comparison Table WAC6103D -I WAC6303D -S WAC6502D WAC6502D WAC6503D -E -S -S WAC6552D WAC6553D -S -E IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.
Chapter 1 Introduction Table 2 WAC 6000 Series Comparison Table WAC6103D -I WAC6303D -S USB Port for BLE No No No No No No No Grounding No Yes Yes Yes No Yes Yes FEATURES WAC6502D WAC6502D WAC6503D -E -S -S Maximum number of log messages 512 event logs and 1024 debug logs A. For NXC managed devices only. See the NXC User’s Guide for details. Table 3 WAX 500/600 Series Comparison Table FEATURES WAX510D WAX650S IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.
Chapter 1 Introduction Table 3 WAX 500/600 Series Comparison Table FEATURES WAX510D WAX650S 802.11k/v Assisted Roaming Yes Yes Bluetooth Low Energy (BLE) No Yes USB Port for BLE No No NoYes Yes Grounding Maximum number of log messages 512 event logs and 1024 debug logs A. For NXC managed devices only. See the NXC User’s Guide for details.
CHAPTER 2 AP Management 2.1 Management Mode The Zyxel Device is a unified AP and can be managed by the NCC or an AP controller (AC), or work as a standalone device. We recommend you use NCC to manage multiple APs (see the NCC User’s Guide). An AP Controller such as the NXC can only manage multiple APs in the same location. Note: Not all models can be managed by NCC or an AC. See Section 1.1 on page 13 to check whether your product supports these.
Chapter 2 AP Management switches and gateways. Your network can also be managed through your smartphone using the Nebula Mobile app. See Section 25.1 on page 229 for an example NCC managed network topology. NCC allows different levels of management. You can configure each device on its own or configure a set of devices together as a site. You can also monitor groups of sites called organizations, as shown below.
Chapter 2 AP Management An AC uses Control And Provisioning of Wireless Access Points (CAPWAP, see RFC 5415) to discover and configure multiple managed APs. 2.2 Switching Management Modes The Zyxel Device is in standalone mode by default with NCC and/or AC discovery enabled, Standalone-to-NCC Register the Zyxel Device at the NCC website and then turn on the Zyxel Device. Make sure that NCC Discovery is enabled (see Section 9.6 on page 104).
Chapter 2 AP Management 2.3 Zyxel One Network (ZON) Utility ZON Utility is a program designed to help you deploy and manage a network more efficiently. It detects devices automatically and allows you to do basic settings on devices in the network without having to be near it.
Chapter 2 AP Management Figure 6 Supported Devices and Versions If you want to check the supported models and firmware versions later, you can click the Show information about ZON icon in the upper right hand corner of the screen. Then select the Supported model and firmware version link. If your device is not listed here, see the device release notes for ZON utility support. The release notes are in the firmware zip file on the Zyxel web site.
Chapter 2 AP Management Figure 8 Network Adapter 4 Click the Go button for the ZON Utility to discover all supported devices in your network. Figure 9 Discovery 5 The ZON Utility screen shows the devices discovered. Figure 10 ZON Utility Screen 6 Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON utility icons.
Chapter 2 AP Management Figure 11 Password Prompt The following table describes the icons numbered from left to right in the ZON Utility screen. Table 6 ZON Utility Icons ICON DESCRIPTION 1 IP configuration Change the selected device’s IP address. 2 Renew IP Address Update a DHCP-assigned dynamic IP address. 3 Reboot Device Use this icon to restart the selected device(s). This may be useful when troubleshooting or upgrading new firmware.
Chapter 2 AP Management Table 7 ZON Utility Fields LABEL DESCRIPTION MAC Address This field displays the MAC address of the discovered device. IP Address This field displays the IP address of an internal interface on the discovered device that first received an ZDP discovery request from the ZON utility. System Name This field displays the system name of the discovered device. Location This field displays where the discovered device is.
Chapter 2 AP Management File Transfer Protocol (FTP) This protocol can be used for firmware upgrades and configuration backup and restore. Simple Network Management Protocol (SNMP) The Zyxel Device can be monitored by an SNMP manager. See the SNMP chapter in this User’s Guide. 2.5 Good Habits for Managing the Zyxel Device Do the following things regularly to make the Zyxel Device more secure and to manage it more effectively. • Change the password often.
CHAPTER 3 Hardware See the Quick Start Guide for hardware installation and connections. 3.1 Grounding (WAC6552D-S and WAC6553D-E) Earth grounding helps protect against lightning and interference. Note: The power installation must be performed by qualified service personnel and should conform to the National Electrical Code. The Zyxel Device must be connected to earth ground to adequately ground the Zyxel Device and protect the operator from electrical hazards.
Chapter 3 Hardware Figure 12 Grounding Example 3.2 Zyxel Device Models With Single LEDs The LEDs of some Zyxel Device models can be controlled by using the suppression feature such that the LEDs stay lit (ON) or OFF after the Zyxel Device is ready. Some Zyxel Device models also has Locator LED which allows you to see the actual location of the Zyxel Device among several devices in the network. See Section 1.4 on page 19 to check which models support these features.
Chapter 3 Hardware Figure 13 NWA1123-ACv2 LED The following are the LED descriptions for your NWA1123-ACv2. Table 8 NWA1123-ACv2 LED COLOR STATUS DESCRIPTION Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the Zyxel Device is booting up or is connecting to the NCC. The Zyxel Device is discovering the NCC. Green Blinks amber and green alternatively 3 times and then turns solid green for 3 seconds.
Chapter 3 Hardware Table 8 NWA1123-ACv2 LED (continued) COLOR Red STATUS DESCRIPTION Steady On The Zyxel Device failed to boot up or is experiencing system failure. Slow Blinking (Blink for 3 times, Off for 3s) The Uplink interface is down. Fast Blinking (On for 50ms, Off for 50ms) The Zyxel Device is undergoing firmware upgrade. 3.2.2 WAC6303D-S and NWA5123-AC HD The following are the LED descriptions for your WAC6303D-S or NWA5123-AC HD.
Chapter 3 Hardware Table 9 WAC6303D-S and NWA5123-AC HD LED (continued) COLOR STATUS DESCRIPTION Blinks amber and green alternatively 2 times and then turns solid green for 3 seconds. The Zyxel Device is managed by an AC but the uplink is disconnected.
Chapter 3 Hardware Figure 15 NWA1123-AC HD LED The following are the LED descriptions for your NWA1123-AC HD. Table 10 NWA1123-AC HD LED COLOR STATUS DESCRIPTION Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up or connecting with NCC. Blinks amber and green alternatively 3 times and then turns solid green for 3 seconds. The Zyxel Device is discovering the NCC.
Chapter 3 Hardware Table 10 NWA1123-AC HD LED (continued) COLOR STATUS DESCRIPTION Steady On The Zyxel Device’s wireless interface is activated, but there are no wireless clients connected when it receives power using 802.3af PoE (limited power mode). Slow Blinking (On for 100ms per second) Locator LED is on. It switches off automatically after the configured amount of time (1-60min). Default duration is 10 minutes.
Chapter 3 Hardware The following are the LED descriptions for your NWA5123-AC. Table 11 NWA5123-AC LED COLOR STATUS DESCRIPTION Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up. Blinks amber and green alternatively 3 times and then turns solid green for 3 seconds. The Zyxel Device is discovering an AC. Green Blinks amber and green alternatively 2 times and then turns solid green for 3 seconds.
Chapter 3 Hardware Figure 17 NWA1123AX, WAX510D and WAX650S LED The following are the LED descriptions for your NWA1123AX, WAX510D and WAX650S. Table 12 NWA1123AX, WAX510D and WAX650S LED COLOR STATUS DESCRIPTION Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the Zyxel Device is booting up or is connecting to the NCC. The Zyxel Device is discovering the NCC.
Chapter 3 Hardware 3.3 Zyxel Device Models With Multiple LEDs The LEDs of some Zyxel Device models can be controlled by using the suppression feature such that the LEDs stay lit (ON) or OFF after the Zyxel Device is ready. Some Zyxel Device models also has Locator LED which allows you to see the actual location of the Zyxel Device among several devices in the network. See Section 1.4 on page 19 to check which models support these features.
Chapter 3 Hardware The following table describes the LEDs. Table 13 NWA1123-AC PRO LEDs LED PWR/SYS COLOR STATUS DESCRIPTION Amber Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the Zyxel Device is booting up. On The Zyxel Device is ready for use. Slow Blinking (On for 1 sec, Off for 1 sec) The wireless module of the Zyxel Device is disabled or failed.
Chapter 3 Hardware Table 13 NWA1123-AC PRO LEDs (continued) LED COLOR STATUS DESCRIPTION Locator White Blinking The Locator is activated and will blink to show the actual location of the Zyxel Device between several devices in the network. Off The Locator function is off. 3.3.2 NWA1302-AC By default, the LEDs automatically turn on when the NWA1302-AC is ready. If the LEDs are turned off by the NCC, you can press the LED ON button for one second to turn on the LEDs again.
Chapter 3 Hardware Table 14 NWA1302-AC LEDs (continued) LED COLOR Management Green Amber Green Amber Green STATUS DESCRIPTION On The Zyxel Device is managed by the NCC. Slow Blinking (On for 1 sec, Off for 1 sec) The Zyxel Device is connected to the NCC, but not registered.The Zyxel Device is using default wireless settings, or the Zyxel Device is connected to the NCC but is unregistered with the NCC.
Chapter 3 Hardware Figure 20 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs The following table describes the LEDs. Table 15 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs LED COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up or is connecting to the NCC or to an AC. On The Zyxel Device is ready for use. Slow Blinking (On for 1s, Off for 1ss) The wireless module of the Zyxel Device is disabled or failed.
Chapter 3 Hardware Table 15 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs (continued) LED COLOR Management Green Amber Green Amber Green WLAN WLAN UPLINK Green Green Amber Green LAN Amber Green Locator White STATUS DESCRIPTION On The Zyxel Device is managed by a the NCC or an AC. Slow Blinking (Blink for 3 times, Off for 3s) The Zyxel Device is searching (discovery) for an AC. Slow Blinking (On for 1s, Off for 1s) The Zyxel Device is connected to the NCC but not registered.
Chapter 3 Hardware Figure 21 WAC6103D-I LEDs The following table describes the LEDs. Table 16 WAC6103D-I LEDs LED COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up. On The Zyxel Device is ready for use. Slow Blinking (On for 1s, Off for 1s) The wireless module of the Zyxel Device is disabled or failed. On There is system error and the Zyxel Device cannot boot up, or the Zyxel Device suffered a system failure.
Chapter 3 Hardware Table 16 WAC6103D-I LEDs (continued) LED COLOR Management Green Amber Green Amber Green WLAN WLAN The Zyxel Device is managed by an AC or the NCC. The Zyxel Device is searching (discovery) for an AC. Slow Blinking (On for 1s, Off for 1s) The Zyxel Device is connected to the NCC but not registered.The Zyxel Device is using default wireless settings, or the Zyxel Device is connected to the NCC but is unregistered with the NCC. Off The Zyxel Device is in standalone mode.
Chapter 3 Hardware Figure 22 WAC5302D-S LEDs The following table describes the LEDs. Table 17 WAC5302D-S LEDs LED COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the WAC is booting up. On The Zyxel Device is ready for use. Slow Blinking (On for 1s, Off for 1s) The wireless module of the Zyxel Device is disabled or failed. Fast Blinking (On 50ms, Off 50ms) The Locator LED is on.
Chapter 3 Hardware Table 17 WAC5302D-S LEDs (continued) LED COLOR UPLINK Amber Green WLAN WLAN LAN Green Green Amber Green STATUS DESCRIPTION On The port is operating as a 10/100 Mbps connection. Blinking The Zyxel Device is sending/receiving data through the port at 10/100 Mbps. On The port is operating as a Gigabit connection (1000 Mbps). Blinking The Zyxel Device is sending/receiving data through the port at 1 Gbps. Off The port is not connected. On The 2.4 GHz WLAN is active.
CHAPTER 4 The Web Configurator 4.1 Overview The Zyxel Device Web Configurator allows management using an Internet browser. In order to use the Web Configurator, you must: • Use Internet Explorer 10.0 and later versions, Mozilla Firefox 36.0 and later versions, Safari 9.0 and later versions, or Google Chrome 38.0 and later versions. • Allow pop-up windows. • Enable JavaScript (enabled by default). • Enable Java permissions (enabled by default). • Enable cookies.
Chapter 4 The Web Configurator If a Zyxel Device is in standalone mode and supports NCC, the login page displays as shown in the following figure. Click Nebula Mode to show the following screen. Here, you can watch a tutorial for using the Zyxel Nebula Control Center (NCC) or access the link to the NCC, as shown in the following figure. Otherwise, continue with the next step. The NCC is a cloud-based network management system that allows you to remotely manage and monitor the Zyxel Device (see Section 2.
Chapter 4 The Web Configurator If you want to return to the login page, click Standalone Mode and follow the next steps. 4 Enter the user name (default: “admin”) and password (default: “1234”). If the Zyxel Device is being managed or has been managed by the NCC, check the NCC's Site-Wide > Configure > General setting screen for the Zyxel Device's current password. 5 Select the language you prefer for the Web Configurator. Click Login.
Chapter 4 The Web Configurator Figure 23 The Web Configurator’s Main Screen for Standalone Mode Figure 24 The Web Configurator’s Main Screen for Cloud Mode The Web Configurator’s main screen is divided into these parts: • A - Title Bar • B - Navigation Panel NWA/WAC/WAX Series User’s Guide 55
Chapter 4 The Web Configurator • C - Main Window 4.3.1 Title Bar The title bar provides some useful links that always appear over the screens below, regardless of how deep into the Web Configurator you navigate. If your Zyxel Device is in NCC mode, not all icons will be available in the Title Bar (see Figure 24 on page 55). Figure 25 Title Bar The icons provide the following functions. Table 18 Title Bar: Web Configurator Icons LABEL DESCRIPTION Logout Click this to log out of the Web Configurator.
Chapter 4 The Web Configurator Table 19 About (continued) LABEL DESCRIPTION Released Date This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. OK Click this to close the screen. Site Map Click Site MAP to see an overview of links to the Web Configurator screens. Click a screen’s link to go to that screen. Figure 27 Site Map Object Reference Click Object Reference to open the Object Reference screen.
Chapter 4 The Web Configurator The fields vary with the type of object. The following table describes labels that can appear in this screen. Table 20 Object References LABEL DESCRIPTION Object Type Select the type of the object. Object Name This identifies the object for which the configuration settings that use it are displayed. Select the object’s name to display the object’s configuration screen in the main window. # This field is a sequential value, and it is not associated with any entry.
Chapter 4 The Web Configurator Figure 30 Navigation Panel 4.3.3 Standalone Mode Navigation Panel Menus The following are the screens available in standalone mode. Note that some screens may not be available for your Zyxel Device model. See Section 1.4 on page 19 to see which features your Zyxel Device model supports. Dashboard The dashboard displays general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs.
Chapter 4 The Web Configurator Configuration Menu Use the configuration menu screens to configure the Zyxel Device’s features. Table 22 Configuration Menu Screens Summary FOLDER OR LINK TAB FUNCTION Network IP Setting Configure the IP address for the Zyxel Device Ethernet interface. VLAN Manage the Ethernet interface VLAN settings. Storm Control Enable or disable the broadcast/multicast storm control feature. AC Discovery Configures the Zyxel Device’s AP Controller settings.
Chapter 4 The Web Configurator Table 22 Configuration Menu Screens Summary (continued) FOLDER OR LINK TAB FUNCTION Email Daily Report Email Daily Report Configure where and how to send daily reports and what reports to send. Log Setting Log Setting Configure the system log, e-mail logs, and remote syslog servers. Maintenance Menu Use the maintenance menu screens to manage configuration and firmware files, run diagnostics, and reboot or shut down the Zyxel Device.
Chapter 4 The Web Configurator 4.3.5 Tables and Lists The Web Configurator tables and lists are quite flexible and provide several options for how to display their entries. 4.3.5.1 Manipulating Table Display Here are some of the ways you can manipulate the Web Configurator tables. 1 Click a column heading to sort the table’s entries according to that column’s criteria. 2 Click the down arrow next to a column heading for more options about how to display the entries.
Chapter 4 The Web Configurator 4 Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. 5 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time. 4.3.5.2 Working with Table Entries The tables have icons for working with table entries. A sample is shown next.
Chapter 4 The Web Configurator Table 25 Common Table Icons Here are descriptions for the most common table icons. Table 26 Common Table Icons LABEL DESCRIPTION Add Click this to create a new entry. For features where the entry’s position in the numbered list is important (features where the Zyxel Device applies the table’s entries in order like the firewall for example), you can select an entry and click Add to create a new entry after the selected entry.
P ART I Standalone Configuration 65
CHAPTER 5 Standalone Configuration 5.1 Overview The Zyxel Device is in standalone mode by default. Use the web configurator to manage and configure the Zyxel Device directly. As shown in the following figure, wireless clients can connect to the Zyxel Device (A) to access network resources. 5.2 Starting and Stopping the Zyxel Device Here are some of the ways to start and stop the Zyxel Device.
Chapter 5 Standalone Configuration Table 27 Starting and Stopping the Zyxel Device METHOD DESCRIPTION Using the RESET button If you press the RESET button on the back of the Zyxel Device, the Zyxel Device sets the configuration to its default values and then reboots. See Section 28.6 on page 243 for more information.
CHAPTER 6 Dashboard This screen displays general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs. You can also collapse, refresh, and close individual widgets. Figure 31 Dashboard The following table describes the labels in this screen. Table 28 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link to re-open closed widgets. Widgets that are already open appear grayed out.
Chapter 6 Dashboard Table 28 Dashboard (continued) LABEL DESCRIPTION Model Name This field displays the model name of this Zyxel Device. Serial Number This field displays the serial number of this Zyxel Device. MAC Address Range This field displays the MAC addresses used by the Zyxel Device. Each physical port or wireless radio has one MAC address. The first MAC address is assigned to the Ethernet LAN port, the second MAC address is assigned to the first radio, and so on.
Chapter 6 Dashboard Table 28 Dashboard (continued) LABEL DESCRIPTION Current Login User This field displays the user name used to log in to the current session, the amount of reauthentication time remaining, and the amount of lease time remaining. Boot Status This field displays details about the Zyxel Device’s startup state. OK - The Zyxel Device started up successfully. Firmware update OK - A firmware update was successful.
Chapter 6 Dashboard Table 28 Dashboard (continued) LABEL Status DESCRIPTION This field displays the current status of each interface. The possible values depend on what type of interface it is. Inactive - The Ethernet interface is disabled. Down - The Ethernet interface is enabled but not connected. Speed / Duplex - The Ethernet interface is enabled and connected. This field displays the port speed and duplex setting (Full or Half). VID This field displays the VLAN ID to which the interface belongs.
Chapter 6 Dashboard Figure 32 Dashboard > CPU Usage The following table describes the labels in this screen. Table 29 Dashboard > CPU Usage LABEL DESCRIPTION % The y-axis represents the percentage of CPU usage. time The x-axis shows the time period over which the CPU usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. 6.0.
Chapter 6 Dashboard The following table describes the labels in this screen. Table 30 Dashboard > Memory Usage LABEL DESCRIPTION % The y-axis represents the percentage of RAM usage. time The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away.
CHAPTER 7 Setup Wizard 7.1 Accessing the Wizard When you log into the Web Configurator for the first time or when you reset the Zyxel Device to its default configuration, the wizard screen displays. Note: If you have already configured the wizard screens and want to open it again, click the Wizard icon on the upper right corner of any Web Configurator screen. 7.
Chapter 7 Setup Wizard Figure 34 Wizard: Time Settings 7.2.2 Step 2 Password and Uplink Connection Use this screen to configure the Zyxel Device’s system password and IP address. Change Password: Enter a new password and retype it to confirm. Uplink Connection: Select Auto (DHCP) if the Zyxel Device is connected to a router with the DHCP server enabled. You then need to check the router for the IP address assigned to the Zyxel Device in order to access the Zyxel Device’s web configurator again.
Chapter 7 Setup Wizard Figure 35 Wizard: Change Password and Uplink Connection 7.2.3 Step 3 Radio Use this screen to configure the Zyxel Device’s radio transmitter(s). • Channel Selection: Select Auto to have the Zyxel Device automatically choose a radio channel that has least interference. Otherwise, select Manual and specify a channel the Zyxel Device will use in the 2.4GHz or 5GHz wireless LAN. The options vary depending on the frequency band and the country you are in.
Chapter 7 Setup Wizard Figure 36 Wizard: Radio 7.2.4 Step 4 SSID Use this screen to enable, disable or edit an SSID profile. Select an SSID profile and click the Status switch to turn it on or off. To change an SSID profile’s settings, such as the SSID (WiFi network name) and WiFi password, double-click the SSID profile entry from the list. See Section 7.2.4.1 on page 77 for more information. Note: You cannot add or remove an SSID profile after running the setup wizard. Figure 37 Wizard: SSID 7.2.4.
Chapter 7 Setup Wizard The screen varies depending on the security type you selected. • SSID: Enter a descriptive name of up to 32 printable characters for the wireless LAN. • VLAN ID: Enter a VLAN ID for the Zyxel Device to use to tag traffic originating from this SSID. Band Mode: Select the wireless band which this profile should use. 2.4 GHz is the frequency used by IEEE 802.11b/g/n wireless clients. 5 GHz is the frequency used by IEEE 802.11ac/a/n wireless clients.
Chapter 7 Setup Wizard Figure 39 Wizard: SSID: Edit (802.1xWPA2-Enterprise) 7.2.5 Summary Use this screen to check whether what you have configured is correct. Click Save to apply your settings and complete the wizard setup. Otherwise, click Prev to return to the previous screen or click Cancel to close the wizard without saving.
CHAPTER 8 Monitor 8.1 Overview Use the Monitor screens to check status and statistics information. 8.1.1 What You Can Do in this Chapter • The Network Status screen (Section 8.3 on page 81) displays general LAN interface information and packet statistics. • The AP Information > Radio List screen (Section 8.4 on page 83) displays statistics about the wireless radio transmitters in the Zyxel Device. • The Station Info screen (Section 8.5 on page 87) displays statistics pertaining to the associated stations.
Chapter 8 Monitor 8.3 Network Status Use this screen to look at general Ethernet interface information and packet statistics. To access this screen, click Monitor > Network Status. Figure 41 Monitor > Network Status The following table describes the labels in this screen. Table 31 Monitor > Network Status LABEL DESCRIPTION Interface Summary Use the Interface Summary section for IPv4 network settings.
Chapter 8 Monitor Table 31 Monitor > Network Status (continued) LABEL DESCRIPTION Poll Interval Enter how often you want this window to be updated automatically, and click Set Interval. Set Interval Click this to set the Poll Interval the screen uses. Stop Click this to stop the window from updating automatically. You can start it again by setting the Poll Interval and clicking Set Interval. Switch to Graphic View Click this to display the port statistics as a line graph.
Chapter 8 Monitor Figure 42 Monitor > Network Status > Switch to Graphic View The following table describes the labels in this screen. Table 32 Monitor > Network Status > Switch to Graphic View LABEL DESCRIPTION Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. Port Selection Select the Ethernet port for which you want to view the packet statistics.
Chapter 8 Monitor Figure 43 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that supports WDS) Figure 44 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that doesn’t support WDS) The following table describes the labels in this screen. Table 33 Monitor > Wireless > AP Information > Radio List LABEL DESCRIPTION More Information Click this to view additional information about the selected radio’s wireless traffic and station count.
Chapter 8 Monitor Table 33 Monitor > Wireless > AP Information > Radio List (continued) LABEL DESCRIPTION Transmit Power This displays the output power of the radio. Station This displays the number of wireless clients connected to this radio on the Zyxel Device. Upload This displays the total number of packets received by the radio. Download This displays the total number of packets transmitted by the radio. 8.4.
Chapter 8 Monitor Figure 45 Monitor > Wireless > AP Information > Radio List > More Information NWA/WAC/WAX Series User’s Guide 86
Chapter 8 Monitor The following table describes the labels in this screen. Table 34 Monitor > Wireless > AP Information > Radio List > More Information LABEL DESCRIPTION SSID Detail This list shows information about all the wireless clients that have connected to the specified radio over the preceding 24 hours. # This is the items sequential number in the list. It has no bearing on the actual data in this list. SSID Name This displays an SSID associated with this radio.
Chapter 8 Monitor Table 35 Monitor > Wireless > Station Info (continued) LABEL DESCRIPTION MAC Address This is the station’s MAC address. Radio This is the radio number on the Zyxel Device to which the station is connected. Capability This displays the supported standard currently being used by the station or the standards supported by the station. 802.11 Features This displays whether the station supports IEEE802.11r, IEEE 802.11k, IEEE 802.11v or none of the above (N/A).
Chapter 8 Monitor The following table describes the labels in this screen. Table 36 Monitor > Wireless > WDS Link Info LABEL DESCRIPTION WDS Uplink Info Uplink refers to the WDS link from the repeaters to the root AP. WDS Downlink Info Downlink refers to the WDS link from the root AP to the repeaters. When the Zyxel Device is in root AP mode and connected to a repeater, only the downlink information is displayed.
Chapter 8 Monitor Figure 48 Monitor > Wireless > Detected Device (for Zyxel Device that supports Monitor mode) NWA/WAC/WAX Series User’s Guide 90
Chapter 8 Monitor Figure 49 Monitor > Wireless > Detected Device (for Zyxel Device that doesn’t support Monitor mode) The following table describes the labels in this screen. Table 37 Monitor > Wireless > Detected Device LABEL DESCRIPTION Discovered APs Rogue AP This shows how many devices are detected as rogue APs. Suspected rogue AP This shows how many devices are detected as possible rogue APs based on the classification rule(s) in Section 10.3 on page 110.
Chapter 8 Monitor Table 37 Monitor > Wireless > Detected Device (continued) LABEL DESCRIPTION Mark as Rogue AP Click this button to mark the selected AP as a rogue AP. For more on managing rogue APs, see the Configuration > Wireless > Rogue AP screen (Section 10.3 on page 110). Mark as Friendly AP Click this button to mark the selected AP as a friendly AP. For more on managing friendly APs, see the Configuration > Wireless > Rogue AP screen (Section 10.3 on page 110).
Chapter 8 Monitor Figure 50 Monitor > Log > View Log The following table describes the labels in this screen. Table 38 Monitor > Log > View Log LABEL DESCRIPTION Show Filter / Hide Filter Click this button to show or hide the filter settings. If the filter settings are hidden, the Display, Email Log Now, Refresh, and Clear Log fields are available.
Chapter 8 Monitor Table 38 Monitor > Log > View Log (continued) LABEL DESCRIPTION Destination Address This displays when you show the filter. Type the IP address of the destination of the incoming packet when the log message was generated. Do not include the port in this filter. Source Interface This displays when you show the filter. Select the source interface of the packet that generated the log message. Destination Interface This displays when you show the filter.
CHAPTER 9 Network 9.1 Overview This chapter describes how you can configure the management IP address and VLAN settings of your Zyxel Device. The Internet Protocol (IP) address identifies a device on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts. Figure 51 IP Setup The figure above illustrates one possible setup of your Zyxel Device.
Chapter 9 Network Figure 52 AC managed Network Example Note: The Zyxel Device can be a standalone device or be managed by an AC. AC Discovery and Management The link between AC Discovery-enabled access points proceeds as follows: 1 An Zyxel Device with AC Discovery enabled joins a wired network (receives a dynamic IP address). 2 The Zyxel Device sends out a discovery request, looking for an AC. 3 If there is an AC on the network, it receives the discovery request.
Chapter 9 Network Note: The AC needs to have a static IP address. If it is a DHCP client, set the DHCP server to reserve an IP address for the AC. AC management and IP Subnets By default, CAPWAP works only between Zyxel Devices with IP addresses in the same subnet. However, you can configure the Zyxel Device and the AC to use CAPWAP with IP addresses in different subnets by doing the following. • Activate DHCP. Your network’s DHCP server must support option 138 defined in RFC 5415.
Chapter 9 Network • The NCC Discovery screen (Section 9.6 on page 104) configures the Zyxel Device’s Nebula Control Center (NCC) discovery settings. 9.2 IP Setting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click Configuration > Network > IP Setting. Figure 54 Configuration > Network > IP Setting Each field is described in the following table.
Chapter 9 Network Table 39 Configuration > Network > IP Setting (continued) LABEL DNS Server IP Address DESCRIPTION Enter the IP address of the DNS server. IPv6 Address Assignment Enable Stateless Address Autoconfiguration (SLAAC) Select this to enable IPv6 stateless auto-configuration on the Zyxel Device. The Zyxel Device will generate an IPv6 address itself from a prefix obtained from an IPv6 router in the network.
Chapter 9 Network Figure 55 Management VLAN Setup In the figure above, to access and manage the Zyxel Device from computer A, the Zyxel Device and switch B’s ports to which computer A and the Zyxel Device are connected should be in the same VLAN. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group.
Chapter 9 Network Figure 56 Configuration > Network > VLAN (for Zyxel Device with multiple Ethernet ports) Figure 57 Configuration > Network > VLAN (for Zyxel Device with one Ethernet port) Each field is described in the following table. Table 40 Configuration > Network > VLAN LABEL DESCRIPTION VLAN Settings Management VLAN ID Enter a VLAN ID for the Zyxel Device.
Chapter 9 Network Table 40 Configuration > Network > VLAN (continued) LABEL PVID DESCRIPTION This field displays the port number of the VLAN ID. VLAN Configuration Add Click this to create a new entry. For features where the entry’s position in the numbered list is important (features where the Zyxel Device applies the table’s entries in order like the SSID for example), you can select an entry and click Add to create a new entry after the selected entry.
Chapter 9 Network Each field is described in the following table. Table 41 Configuration > Network > Storm Control LABEL DESCRIPTION Broadcast Storm Control Select the check box to enable broadcast storm control on the Zyxel Device. Enabling this will drop ingress broadcast traffic in the physical Ethernet port if it exceeds the maximum traffic rate. Multicast Storm Control Select the check box to enable multicast storm control on the Zyxel Device.
Chapter 9 Network Each field is described in the following table. Table 42 Configuration > Network > AC Discovery LABEL DESCRIPTION Discovery Setting Auto Select this option to use DHCP option 138/DNS SRV record/Broadcast to get the AC’s IP address. If the Zyxel Device and a Zyxel AC, such as the NXC2500 or NXC5500, are in the same subnet, it will be managed by the controller automatically. Manual Select this option and enter the IP address of the AC manually.
Chapter 9 Network Each field is described in the following table. Table 43 Configuration > Network > NCC Discovery LABEL DESCRIPTION Enable Select this option to turn on NCC discovery on the Zyxel Device. The Zyxel Device will try to discover the NCC and go into NCC management mode when it is connected to the Internet and has been registered in the NCC. If NCC discovery is disabled, the Zyxel Device will not discover the NCC and remain in standalone operation.
CHAPTER 10 Wireless 10.1 Overview This chapter discusses how to configure the wireless network settings in your Zyxel Device. The following figure provides an example of a wireless network. Figure 61 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the printer) or with the Internet. Your Zyxel Device is the AP. 10.1.
Chapter 10 Wireless 10.1.2 What You Need to Know The following terms and concepts may help as you read this chapter. Station / Wireless Client A station or wireless client is any wireless-capable device that can connect to an AP using a wireless signal. Dynamic Channel Selection (DCS) Dynamic Channel Selection (DCS) is a feature that allows an AP to automatically select the radio channel which it broadcasts. For more information, see Section 10.6 on page 118.
Chapter 10 Wireless Figure 62 Configuration > Wireless > AP Management Each field is described in the following table. Table 44 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the check box to enable the Zyxel Device’s first (default) radio.
Chapter 10 Wireless Table 44 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Radio 1 OP Mode Select the operating mode for radio 1. AP Mode means the radio can receive connections from wireless clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing).
Chapter 10 Wireless Table 44 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Radio 2 OP Mode This displays if the Zyxel Device has a second radio. Select the operating mode for radio 2. AP Mode means the radio can receive connections from wireless clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing).
Chapter 10 Wireless Rogue APs A rogue AP is a wireless access point operating in a network’s coverage area that is not under the control of the network administrator, and which can potentially open up holes in a network’s security. In the following example, a corporate network’s security is compromised by a rogue AP (RG) set up by an employee at his workstation in order to allow him to connect his notebook computer wirelessly (A).
Chapter 10 Wireless Detected Device screen will appear in the Wireless > Rogue AP screen. See Section 1.4 on page 19 to know which models support Rogue AP Detection. Note: Enabling Rogue AP Detection might affect the performance of wireless clients associated with the Zyxel Device.
Chapter 10 Wireless Figure 65 Configuration > Wireless > Rogue AP (for Zyxel Devices that support Rogue AP Detection) Each field is described in the following table. Table 45 Configuration > Wireless > Rogue AP LABEL DESCRIPTION Rogue AP Detection Setting Enable Rogue AP Detection Select this check box to detect Rogue APs in the network.
Chapter 10 Wireless Table 45 Configuration > Wireless > Rogue AP (continued) LABEL DESCRIPTION Role This field indicates whether the selected AP is a rogue-ap or a friendly-ap. To change the AP’s role, click the Edit button. MAC Address This field indicates the AP’s radio MAC address. Description This field displays the AP’s description. You can modify this by clicking the Edit button.
Chapter 10 Wireless 10.4 Load Balancing Use this screen to configure wireless network traffic load balancing between the APs on your network (see Load Balancing on page 119). Click Configuration > Wireless > Load Balancing to access this screen. Figure 67 Configuration > Wireless > Load Balancing Each field is described in the following table. Table 47 Configuration > Wireless > Load Balancing LABEL DESCRIPTION Enable Load Balancing Select this to enable load balancing on the Zyxel Device.
Chapter 10 Wireless Table 47 Configuration > Wireless > Load Balancing (continued) LABEL Disassociate station when overloaded DESCRIPTION This function is enabled by default and the disassociation priority is always Signal Strength when you set Mode to By Smart Classroom. Select this option to disassociate wireless clients connected to the AP when it becomes overloaded.
Chapter 10 Wireless The second response your AP can take is to disassociate with clients that are pushing it over its balanced bandwidth allotment. Figure 69 Disassociating with a client Connections are cut based on either idle timeout or signal strength. The Zyxel Device first looks to see which devices have been idle the longest, then starts kicking them in order of highest idle time. If no connections are idle, the next criteria the Zyxel Device analyzes is signal strength.
Chapter 10 Wireless Table 48 Configuration > Wireless > DCS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. 10.6 Technical Reference The following section contains additional technical information about the features described in this chapter.
Chapter 10 Wireless Figure 72 An Example Four-Channel Deployment However, some regions require the use of other channels and often use a safety scheme with the following four channels: 1, 4, 7 and 11. While they are situated sufficiently close to both each other and the three so-called “safe” channels (1,6 and 11) that interference becomes inevitable, the severity of it is dependent upon other factors: proximity to the affected AP, signal strength, activity, and so on.
Chapter 10 Wireless Load balancing by traffic level limits the number of connections to the AP based on maximum bandwidth available. If you are uncertain as to the exact number of wireless connections you will have then choose this option. By setting a maximum bandwidth cap, you allow any number of devices to connect as long as their total bandwidth usage does not exceed the configured bandwidth cap associated with this setting.
CHAPTER 11 Bluetooth 11.1 Overview Use this screen to configure the iBeacon advertising settings for the Zyxel Device that supports Bluetooth Low Energy (BLE). Bluetooth Low Energy, which is also known as Bluetooth Smart, transmits less data over a shorter distance but consumes less power than classic Bluetooth. On the WAC5302D-S, you need to attach a supported BLE USB dongle to its USB port to have the AP act as a beacon to broadcast packets.
Chapter 11 Bluetooth 11.2 Bluetooth Advertising Settings The Zyxel Device communicates with another BLE enabled device for advertisements. Use this screen to configure up to five beacon IDs to be included in the advertising packet. To access this screen, click Configuration > Bluetooth > Advertising Settings. Figure 74 Configuration > Bluetooth > Advertising Settings The following table describes the labels in this screen.
Chapter 11 Bluetooth Figure 75 Configuration > Bluetooth > Advertising Settings > Edit The following table describes the labels in this screen. Table 50 Configuration > Bluetooth > Advertising Settings > Edit LABEL DESCRIPTION Activate Select this option to enable the advertising settings. UUID To specify a UUID for the Zyxel Device’s beacon ID, enter 32 hexadecimal digits in the range of “A-F”, “a-f” and “0-9”, split into five groups separated by hyphens (-).
CHAPTER 12 User 12.1 Overview This chapter describes how to set up user accounts and user settings for the Zyxel Device. 12.1.1 What You Can Do in this Chapter • The User screen (see Section 12.2 on page 125) provides a summary of all user accounts. • The Setting screen (see Section 12.3 on page 127) controls default settings, login settings, lockout settings, and other user settings for the Zyxel Device. 12.1.2 What You Need To Know The following terms and concepts may help as you read this chapter.
Chapter 12 User 12.2 User Summary The User screen provides a summary of all user accounts. To access this screen click Configuration > Object > User. Figure 76 Configuration > Object > User The following table describes the labels in this screen. Table 52 Configuration > Object > User LABEL DESCRIPTION Add Click this to create a new entry. Edit Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Chapter 12 User • - [dashes] The first character must be alphabetical (A-Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user 'bob' but use 'BOB' when connecting via CIFS or FTP, it will use the account settings used for 'BOB' not ‘bob’. • User names have to be different than user group names.
Chapter 12 User Table 53 Configuration > User > User > Add/Edit A User (continued) LABEL DESCRIPTION Authentication Timeout Settings This field is not available if the user type is user. Lease Time This field is not available if the user type is user. If you want to set authentication timeout to a value other than the default settings, select Use Manual Settings then fill your preferred values in the fields that follow.
Chapter 12 User Figure 78 Configuration > Object > User > Setting The following table describes the labels in this screen. Table 54 Configuration > Object > User > Setting LABEL DESCRIPTION User Default Setting Default Authentication Timeout Settings These authentication timeout settings are used by default when you create a new user account. They also control the settings for any existing user accounts that are set to use the default settings.
Chapter 12 User Table 54 Configuration > Object > User > Setting (continued) LABEL DESCRIPTION Limit the number of simultaneous logons for administration account Select this check box if you want to set a limit on the number of simultaneous logins by admin users. If you do not select this, admin users can login as many times as they want at the same time using the same or different IP addresses. Maximum number per administration account This field is effective when Limit ...
Chapter 12 User The following table describes the labels in this screen. Table 55 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User Type This read-only field identifies the type of user account for which you are configuring the default settings. • • Lease Time admin - this user can look at and change the configuration of the Zyxel Device. limited-admin - this user can look at the configuration of the Zyxel Device but not to change it.
CHAPTER 13 AP Profile 13.1 Overview This chapter shows you how to configure preset profiles for the Zyxel Device. 13.1.1 What You Can Do in this Chapter • The Radio screen (Section 13.2 on page 132) creates radio configurations that can be used by the APs. • The SSID screen (Section 13.3 on page 138) configures three different types of profiles for your networked APs. 13.1.2 What You Need To Know The following terms and concepts may help as you read this chapter.
Chapter 13 AP Profile WEP WEP (Wired Equivalent Privacy) encryption scrambles all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications private. Both the wireless stations and the access points must use the same WEP key for data encryption and decryption. WPA2 WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption, authentication and key management than WPA.
Chapter 13 AP Profile Figure 80 Configuration > Object > AP Profile > Radio The following table describes the labels in this screen. Table 56 Configuration > Object > AP Profile > Radio LABEL DESCRIPTION Add Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile. Activate To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate.
Chapter 13 AP Profile Figure 81 Configuration > Object > AP Profile > Radio > Add/Edit Profile The following table describes the labels in this screen. Table 57 Configuration > Object > AP Profile > Radio > Add/Edit Profile LABEL DESCRIPTION Hide / Show Advanced Settings Click this to hide or show the Advanced Settings in this window. General Settings Activate Select this option to make this profile active.
Chapter 13 AP Profile Table 57 Configuration > Object > AP Profile > Radio > Add/Edit Profile (continued) LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters to be used as this profile’s name. Spaces and underscores are allowed. 802.11 Band Select whether this radio would use the 2.4 GHz or 5 GHz band. 802.11 BandMode Select how to let wireless clients connect to the AP. If 802.11 Band is set to 2.4G: • • • 11b/g: allows either IEEE 802.11b or IEEE 802.
Chapter 13 AP Profile Table 57 Configuration > Object > AP Profile > Radio > Add/Edit Profile (continued) LABEL Enable DCS Client Aware DESCRIPTION This field is available when you set Channel Selection to DCS. Select this to have the Zyxel Device switch channels only when there are no clients connected to it. If there is a client connected, the Zyxel Device will not switch channels but generate a log.
Chapter 13 AP Profile Table 57 Configuration > Object > AP Profile > Radio > Add/Edit Profile (continued) LABEL DESCRIPTION Time Interval Select this option to have the Zyxel Device survey the other APs within its broadcast radius at the end of the specified time interval. DCS Time Interval This field is available when you set Channel Selection to DCS and select the Time Interval option. Enter a number of minutes.
Chapter 13 AP Profile Table 57 Configuration > Object > AP Profile > Radio > Add/Edit Profile (continued) LABEL DESCRIPTION DTIM Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Active Power Management mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 255.
Chapter 13 AP Profile 13.3.1 SSID List This screen allows you to create and manage SSID configurations that can be used by the APs. An SSID, or Service Set IDentifier, is basically the name of the wireless network to which a wireless client can connect. The SSID appears as readable text to any device capable of scanning for wireless frequencies (such as the WiFi adapter in a laptop), and is displayed as the wireless network name when a person makes a connection to it.
Chapter 13 AP Profile Table 58 Configuration > Object > AP Profile > SSID > SSID List (continued) LABEL DESCRIPTION Object Reference Click this to view which other objects are linked to the selected SSID profile (for example, radio profile). # This field is a sequential value, and it is not associated with a specific user. Profile Name This field indicates the name assigned to the SSID profile. SSID This field indicates the SSID name as it appears to wireless clients.
Chapter 13 AP Profile The following table describes the labels in this screen. Table 59 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile LABEL DESCRIPTION Create new Object Select an object type from the list to create a new one associated with this SSID profile. Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed.
Chapter 13 AP Profile Table 59 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL Uplink DESCRIPTION Define the maximum outgoing transmission data rate (either in mbps or kbps) on a perstation basis. VLAN ID Enter a VLAN ID for the Zyxel Device to use to tag traffic originating from this SSID. Hidden SSID Select this if you want to “hide” your SSID from wireless clients.
Chapter 13 AP Profile Figure 85 Configuration > Object > AP Profile > SSID > Security List The following table describes the labels in this screen. Table 60 Configuration > Object > AP Profile > SSID > Security List LABEL DESCRIPTION Add Click this to add a new security profile. Edit Click this to edit the selected security profile. Remove Click this to remove the selected security profile.
Chapter 13 AP Profile Figure 86 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile NWA/WAC/WAX Series User’s Guide 144
Chapter 13 AP Profile The following table describes the labels in this screen. Table 61 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed.
Chapter 13 AP Profile Table 61 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile (continued) LABEL DESCRIPTION Key 1~4 Based on your Key Length selection, enter the appropriate length hexadecimal or ASCII key. Group Key Update Timer Enter the interval (in seconds) at which the AP updates the group WPA2 encryption key. Management Frame Protection This field is available only when you select wpa2 in the Security Mode field and set Cipher Type to aes.
Chapter 13 AP Profile Table 61 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile (continued) LABEL NAS Identifier DESCRIPTION If the RADIUS server requires the Zyxel Device to provide the NAS (Network Access Server) identifier attribute, enter it here. The NAS identifier is to identify the source of access request. It could be the NAS’s fully qualified domain name. OK Click OK to save your changes back to the Zyxel Device.
Chapter 13 AP Profile Figure 88 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile The following table describes the labels in this screen. Table 63 Configuration > Object > AP Profile > SSID > MAC Filter List > Add/Edit MAC Filter Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed.
Chapter 13 AP Profile Note: Intra-BSS Traffic Blocking is activated when you enable layer-2 isolation. Figure 89 Layer-2 Isolation Application MAC addresses that are not listed in the layer-2 isolation table are blocked from communicating with the Zyxel Device’s wireless clients except for broadcast packets. Layer-2 isolation does not check the traffic between wireless clients that are associated with the same AP.
Chapter 13 AP Profile 13.6.1 Add/Edit Layer-2 Isolation Profile This screen allows you to create a new layer-2 isolation profile or edit an existing one. To access this screen, click the Add button or select a layer-2 isolation profile from the list and click the Edit button. Note: You need to know the MAC address of each wireless client, AP, computer or router that you want to allow to communicate with the Zyxel Device's wireless clients.
CHAPTER 14 MON Profile 14.1 Overview This screen allows you to set up monitor mode configurations that allow your Zyxel Device to scan for other wireless devices in the vicinity. Once detected, you can use the Wireless > MON Mode screen (Section 10.3 on page 110) to classify them as either rogue or friendly. Not all Zyxel Devices support monitor mode and rogue APs detection. 14.1.1 What You Can Do in this Chapter The MON Profile screen (Section 14.
Chapter 14 MON Profile Table 66 Configuration > Object > MON Profile (continued) LABEL DESCRIPTION Object Reference Click this to view which other objects are linked to the selected monitor mode profile (for example, an AP management profile). # This field is a sequential value, and it is not associated with a specific profile. Status This field shows whether or not the entry is activated. Profile Name This field indicates the name assigned to the monitor profile. 14.2.
Chapter 14 MON Profile The following table describes the labels in this screen. Table 67 Configuration > Object > MON Profile > Add/Edit MON Profile LABEL DESCRIPTION Activate Select this to activate this monitor mode profile. Profile Name This field indicates the name assigned to the monitor mode profile. Channel dwell time Enter the interval (in milliseconds) before the Zyxel Device switches to another channel for monitoring.
CHAPTER 15 WDS Profile 15.1 Overview This chapter shows you how to configure WDS (Wireless Distribution System) profiles for the Zyxel Device to form a WDS with other APs. 15.1.1 What You Can Do in this Chapter The WDS Profile screen (Section 15.2 on page 154) creates preset WDS configurations that can be used by the Zyxel Device. 15.2 WDS Profile This screen allows you to manage and create WDS profiles that can be used by the APs. To access this screen, click Configuration > Object > WDS Profile.
Chapter 15 WDS Profile 15.2.1 Add/Edit WDS Profile This screen allows you to create a new WDS profile or edit an existing one. To access this screen, click the Add button or select and existing profile and click the Edit button. Figure 95 Configuration > Object > WDS Profile > Add/Edit WDS Profile The following table describes the labels in this screen.
CHAPTER 16 Certificates 16.1 Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. 16.1.1 What You Can Do in this Chapter • The My Certificates screens (Section 16.
Chapter 16 Certificates 5 Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny’s public key to verify the message. The Zyxel Device uses certificates based on public-key cryptology to authenticate users attempting to establish a connection, not to encrypt the data that you send after establishing a connection. The method used to secure the data that you send through an established connection depends on the type of connection.
Chapter 16 Certificates • Binary PKCS#12: This is a format for transferring public key and private key certificates.The private key in a PKCS #12 file is within a password-encrypted envelope. The file’s password is not connected to your certificate’s public or private passwords. Exporting a PKCS #12 file creates this and you must provide it to decrypt the contents when you import the file into the Zyxel Device. Note: Be careful not to convert a binary file to text during the transfer process.
Chapter 16 Certificates 16.2 My Certificates Click Configuration > Object > Certificate > My Certificates to open this screen. This is the Zyxel Device’s summary list of certificates and certification requests. Figure 96 Configuration > Object > Certificate > My Certificates The following table describes the labels in this screen.
Chapter 16 Certificates Table 70 Configuration > Object > Certificate > My Certificates (continued) LABEL DESCRIPTION Issuer This field displays identifying information about the certificate’s issuing certification authority, such as a common name, organizational unit or department, organization or company and country. With self-signed certificates, this is the same information as in the Subject field. Valid From This field displays the date that the certificate becomes applicable.
Chapter 16 Certificates The following table describes the labels in this screen. Table 71 Configuration > Object > Certificate > My Certificates > Add LABEL DESCRIPTION Name Type a name to identify this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters. Subject Information Use these fields to record information that identifies the owner of the certificate.
Chapter 16 Certificates Table 71 Configuration > Object > Certificate > My Certificates > Add (continued) LABEL DESCRIPTION Create a certification request and enroll for a certificate immediately online Select this to have the Zyxel Device generate a request for a certificate and apply to a certification authority for a certificate. You must have the certification authority’s certificate already imported in the Trusted Certificates screen.
Chapter 16 Certificates Figure 98 Configuration > Object > Certificate > My Certificates > Edit NWA/WAC/WAX Series User’s Guide 163
Chapter 16 Certificates The following table describes the labels in this screen. Table 72 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters. Certification Path This field displays for a certificate, not a certification request.
Chapter 16 Certificates Table 72 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION MD5 Fingerprint This is the certificate’s message digest that the Zyxel Device calculated using the MD5 algorithm. SHA1 Fingerprint This is the certificate’s message digest that the Zyxel Device calculated using the SHA1 algorithm. Certificate in PEM (Base-64) Encoded Format This read-only text box displays the certificate or certification request in Privacy Enhanced Mail (PEM) format.
Chapter 16 Certificates Figure 99 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen. Table 73 Configuration > Object > Certificate > My Certificates > Import LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it. You cannot import a certificate with the same name as a certificate that is already in the Zyxel Device.
Chapter 16 Certificates Figure 100 Configuration > Object > Certificate > Trusted Certificates The following table describes the labels in this screen. Table 74 Configuration > Object > Certificate > Trusted Certificates LABEL DESCRIPTION PKI Storage Space in Use This bar displays the percentage of the Zyxel Device’s PKI storage space that is currently in use. When the storage space is almost full, you should consider deleting expired or unnecessary certificates before adding more certificates.
Chapter 16 Certificates certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority.
Chapter 16 Certificates Figure 101 Configuration > Object > Certificate > Trusted Certificates > Edit NWA/WAC/WAX Series User’s Guide 169
Chapter 16 Certificates The following table describes the labels in this screen. Table 75 Configuration > Object > Certificate > Trusted Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate. You can change the name. You can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=- characters.
Chapter 16 Certificates Table 75 Configuration > Object > Certificate > Trusted Certificates > Edit (continued) LABEL DESCRIPTION Valid From This field displays the date that the certificate becomes applicable. The text displays in red and includes a Not Yet Valid! message if the certificate has not yet become applicable. Valid To This field displays the date that the certificate expires.
Chapter 16 Certificates Figure 102 Configuration > Object > Certificate > Trusted Certificates > Import The following table describes the labels in this screen. Table 76 Configuration > Object > Certificate > Trusted Certificates > Import LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it. You cannot import a certificate with the same name as a certificate that is already in the Zyxel Device.
CHAPTER 17 System 17.1 Overview Use the system screens to configure general Zyxel Device settings. 17.1.1 What You Can Do in this Chapter • The Host Name screen (Section 17.2 on page 173) configures a unique name for the Zyxel Device in your network. • The Power Mode screen (Section 17.3 on page 174) configures the Zyxel Device’s power settings. • The Date/Time screen (Section 17.4 on page 175) configures the date and time for the Zyxel Device. • The WWW screens (Section 17.
Chapter 17 System The following table describes the labels in this screen. Table 77 Configuration > System > Host Name LABEL DESCRIPTION System Name Choose a descriptive name to identify your Zyxel Device device. This name can be up to 64 alphanumeric characters long. Spaces are not allowed, but dashes (-) underscores (_) and periods (.) are accepted. System Location Specify the name of the place where the Zyxel Device is located.
Chapter 17 System 17.4 Date and Time For effective scheduling and logging, the Zyxel Device system time must be accurate. The Zyxel Device has a software mechanism to set the time manually or get the current time and date from an external server. To change your Zyxel Device’s time based on your local time zone and date, click Configuration > System > Date/Time. The screen displays as shown.
Chapter 17 System Table 79 Configuration > System > Date/Time (continued) LABEL DESCRIPTION New Date (yyyy-mm-dd) This field displays the last updated date from the time server or the last date configured manually. When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Server Select this radio button to have the Zyxel Device get the time and date from the time server you specify below.
Chapter 17 System 17.4.1 Pre-defined NTP Time Servers List When you turn on the Zyxel Device for the first time, the date and time start at 2003-01-01 00:00:00. The Zyxel Device then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers. The Zyxel Device continues to use the following pre-defined list of NTP time servers if you do not specify a time server or it cannot synchronize with the time server you specified. Table 80 Default Time Servers 0.
Chapter 17 System To get the Zyxel Device date and time from a time server: 1 Click System > Date/Time. 2 Select Get from Time Server under Time and Date Setup. 3 Under Time Zone Setup, select your Time Zone from the list. 4 Under Time and Date Setup, enter a Time Server Address. 5 Click Apply. 17.5 WWW Overview The following figure shows secure and insecure management of the Zyxel Device coming in from the WAN. HTTPS and SSH access are secure.
Chapter 17 System 17.5.3 HTTPS You can set the Zyxel Device to use HTTP or HTTPS (HTTPS adds security) for Web Configurator sessions. HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol that encrypts and decrypts web pages.
Chapter 17 System Figure 109 Configuration > System > WWW > Service Control The following table describes the labels in this screen. Table 81 Configuration > System > WWW > Service Control LABEL DESCRIPTION HTTPS Enable Select the check box to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the Zyxel Device Web Configurator using secure HTTPs connections. Server Port The HTTPS server listens on port 443 by default.
Chapter 17 System 17.5.5.1 Google Chrome Warning Messages When you attempt to access the Zyxel Device HTTPS server, you will see the error message shown in the following screen. Figure 110 Security Alert Dialog Box (Google Chrome) Select Advanced > Proceed to 192.168.1.2 (unsafe) to proceed to the Web Configurator login screen. 17.5.5.2 Mozilla Firefox Warning Messages When you attempt to access the Zyxel Device HTTPS server, a Warning screen appears as shown in the following screen. Click Learn More...
Chapter 17 System Figure 111 Security Certificate 1 (Firefox) 17.5.5.3 Avoiding Browser Warning Messages Here are the main reasons your browser displays warnings about the Zyxel Device’s HTTPS server certificate and what you can do to avoid seeing the warnings: • The issuing certificate authority of the Zyxel Device’s HTTPS server certificate is not one of the browser’s trusted certificate authorities.
Chapter 17 System Figure 112 Trusted Certificates The CA sends you a package containing the CA’s trusted certificate(s), your personal certificate(s) and a password to install the personal certificate(s). 17.5.5.5 Installing a Personal Certificate You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment. Double-click the personal certificate given to you by the CA to produce a screen similar to the one shown next. 1 Click Next to begin the wizard.
Chapter 17 System 3 Enter the password given to you by the CA. 4 Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location.
Chapter 17 System 5 Click Finish to complete the wizard and begin the import process. 6 You should see the following screen when the certificate is correctly installed on your computer. 17.5.5.
Chapter 17 System 1 Enter ‘https://Zyxel Device IP Address/’ in your browser’s web address field. 2 When Authenticate Client Certificates is selected on the Zyxel Device, the following screen asks you to select a personal certificate to send to the Zyxel Device. This screen displays even if you only have a single certificate as in the example. 3 You next see the Web Configurator login screen. 17.6 SSH You can use SSH (Secure SHell) to securely access the Zyxel Device’s command line interface.
Chapter 17 System 17.6.1 How SSH Works The following figure is an example of how a secure connection is established between two remote hosts using SSH v1. Figure 114 How SSH v1 Works Example 1 Host Identification The SSH client sends a connection request to the SSH server. The server identifies itself with a host key. The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server. The client automatically saves any new server public keys.
Chapter 17 System 17.6.2 SSH Implementation on the Zyxel Device Your Zyxel Device supports SSH versions 1 and 2 using RSA authentication and four encryption methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the Zyxel Device for management using port 22 (by default). 17.6.3 Requirements for Using SSH You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the Zyxel Device over SSH. 17.6.
Chapter 17 System 17.6.5 Examples of Secure Telnet Using SSH This section shows two examples using a command interface and a graphical interface SSH client program to remotely access the Zyxel Device. The configuration and connection steps are similar for most SSH client programs. Refer to your SSH client program user’s guide. 17.6.5.1 Example 1: Microsoft Windows This section describes how to access the Zyxel Device using the Secure Shell Client program.
Chapter 17 System Figure 117 SSH Example 2: Test $ telnet 192.168.1.2 22 Trying 192.168.1.2... Connected to 192.168.1.2. Escape character is '^]'. SSH-1.5-1.0.0 2 Enter “ssh –2 192.168.1.2”. This command forces your computer to connect to the Zyxel Device using SSH version 1. If this is the first time you are connecting to the Zyxel Device using SSH, a message displays prompting you to save the host information of the Zyxel Device. Type “yes” and press [ENTER].
Chapter 17 System Table 83 Configuration > System > TELNET (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. 17.8 FTP You can upload and download the Zyxel Device’s firmware and configuration files using FTP. To use this feature, your computer must have an FTP client. See Chapter 19 on page 208 for more information about firmware and configuration files.
Chapter 17 System 17.9 SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Zyxel Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Zyxel Device through the network. The Zyxel Device supports SNMP version one (SNMPv1), version two (SNMPv2c), and version three (SNMPv3). The next figure illustrates an SNMP management operation.
Chapter 17 System • Trap - Used by the agent to inform the manager of some events. 17.9.1 Supported MIBs The Zyxel Device supports MIB II that is defined in RFC-1213 and RFC-1215. The Zyxel Device also supports private MIBs (ZYXEL-ES-CAPWAP.MIB, ZYXEL-ES-COMMON.MIB, ZYXEL-ES-ZyXELAPMgmt.MIB, ZYXEL-ESPROWLAN.MIB, ZYXEL-ES-RFMGMT.MIB, ZYXEL-ES-SMI.MIB, and ZYXEL-ES-WIRELESS.MIB) to collect information about CPU and memory usage and VPN total throughput.
Chapter 17 System The following table describes the labels in this screen. Table 86 Configuration > System > SNMP LABEL DESCRIPTION Enable Select the check box to allow or disallow users to access the Zyxel Device using SNMP. Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Trap Community Type the trap community, which is the password sent with each trap to the SNMP manager.
Chapter 17 System Figure 123 Configuration > System > SNMP > Add The following table describes the labels in this screen. Table 87 Configuration > System > SNMP LABEL DESCRIPTION User Name Select the user name of the user account for which this SNMPv3 user profile is configured. Authentication Select the type of authentication the SNMPv3 user must use to connect to the Zyxel Device using this SNMPv3 user profile. Select MD5 to require the SNMPv3 user’s password be encrypted by MD5 for authentication.
CHAPTER 18 Log and Report 18.1 Overview Use the system screens to configure daily reporting and log settings. 18.1.1 What You Can Do In this Chapter • The Email Daily Report screen (Section 18.2 on page 196) configures how and where to send daily reports and what reports to send. • The Log Setting screens (Section 18.3 on page 198) specify which logs are e-mailed, where they are emailed, and how often they are e-mailed. 18.
Chapter 18 Log and Report Figure 124 Configuration > Log & Report > Email Daily Report The following table describes the labels in this screen. Table 88 Configuration > Log & Report > Email Daily Report LABEL DESCRIPTION Enable Email Daily Report Select this to send reports by e-mail every day. Mail Server Type the name or IP address of the outgoing SMTP server.
Chapter 18 Log and Report Table 88 Configuration > Log & Report > Email Daily Report (continued) LABEL DESCRIPTION SSL/TLS Encryption Select SSL/TLS to use Secure Sockets Layer (SSL) or Transport Layer Security (TLS) if you want encrypted communications between the mail server and the Zyxel Device. Select STARTTLS to upgrade a plain text connection to a secure connection using SSL/TLS. Select No to not encrypt the communications.
Chapter 18 Log and Report Alternatively, if you want to edit what events is included in each log, you can also use the Active Log Summary screen to edit this information for all logs at the same time. 18.3.1 Log Setting Screen To access this screen, click Configuration > Log & Report > Log Setting. Figure 125 Configuration > Log & Report > Log Setting The following table describes the labels in this screen.
Chapter 18 Log and Report Table 89 Configuration > Log & Report > Log Setting (continued) LABEL DESCRIPTION Log Format This field displays the format of the log. Internal - system log; you can view the log on the View Log tab. VRPT/Syslog - Zyxel’s Vantage Report, syslog-compatible format. CEF/Syslog - Common Event Format, syslog-compatible format. Summary This field is a summary of the settings for each log. Active Log Summary Click this button to open the Active Log Summary screen.
Chapter 18 Log and Report Figure 126 Configuration > Log & Report > Log Setting > Edit System Log Setting NWA/WAC/WAX Series User’s Guide 201
Chapter 18 Log and Report The following table describes the labels in this screen. Table 90 Configuration > Log & Report > Log Setting > Edit System Log Setting LABEL DESCRIPTION E-Mail Server 1/2 Active Select this to send log messages and alerts according to the information in this section. You specify what kinds of log messages are included in log information and what kinds of log messages are included in alerts in the Active Log and Alert section.
Chapter 18 Log and Report Table 90 Configuration > Log & Report > Log Setting > Edit System Log Setting (continued) LABEL E-mail Server 1 DESCRIPTION Use the E-Mail Server 1 drop-down list to change the settings for e-mailing logs to e-mail server 1 for all log categories. Using the System Log drop-down list to disable all logs overrides your e-mail server 1 settings. enable normal logs (green check mark) - e-mail log messages for all categories to e-mail server 1.
Chapter 18 Log and Report 18.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon.
Chapter 18 Log and Report The following table describes the labels in this screen. Table 91 Configuration > Log & Report > Log Setting > Edit Remote Server LABEL DESCRIPTION Log Settings for Remote Server Active Select this check box to send log information according to the information in this section. You specify what kinds of messages are included in log information in the Active Log section. Log Format This field displays the format of the log information. It is read-only.
Chapter 18 Log and Report Figure 128 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) The following table describes the fields in this screen.
Chapter 18 Log and Report Table 92 Configuration > Log & Report > Log Setting > Active Log Summary (continued) LABEL DESCRIPTION E-mail Server 1 Use the E-Mail Server 1 drop-down list to change the settings for e-mailing logs to e-mail server 1 for all log categories. Using the System Log drop-down list to disable all logs overrides your e-mail server 1 settings. enable normal logs (green check mark) - e-mail log messages for all categories to e-mail server 1.
CHAPTER 19 File Manager 19.1 Overview Configuration files define the Zyxel Device’s settings. Shell scripts are files of commands that you can store on the Zyxel Device and run when you need them. You can apply a configuration file or run a shell script without the Zyxel Device restarting. You can store multiple configuration files and shell script files on the Zyxel Device. You can edit configuration files or shell scripts in a text editor and upload them to the Zyxel Device. Configuration files use a .
Chapter 19 File Manager While configuration files and shell scripts have the same syntax, the Zyxel Device applies configuration files differently than it runs shell scripts. This is explained below. Table 93 Configuration Files and Shell Scripts in the Zyxel Device Configuration Files (.conf) Shell Scripts (.zysh) • • • • • Resets to default configuration. Goes into CLI Configuration mode. Runs the commands in the configuration file. Goes into CLI Privilege mode.
Chapter 19 File Manager Once your Zyxel Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making further configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. Configuration File Flow at Restart • If there is not a startup-config.
Chapter 19 File Manager The following table describes the labels in this screen. Table 94 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Rename Use this button to change the label of a configuration file on the Zyxel Device. You can only rename manually saved configuration files. You cannot rename the lastgood.conf, systemdefault.conf and startup-config.conf files. You cannot rename a configuration file to the name of another configuration file in the Zyxel Device.
Chapter 19 File Manager Table 94 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Apply Use this button to have the Zyxel Device use a specific configuration file. Click a configuration file’s row to select it and click Apply to have the Zyxel Device use that configuration file. The Zyxel Device does not have to restart in order to use a different configuration file, although you will need to wait for a few minutes while the system reconfigures.
Chapter 19 File Manager Table 94 Maintenance > File Manager > Configuration File (continued) LABEL DESCRIPTION Last Modified This column displays the date and time that the individual configuration files were last changed or saved. Upload Configuration File The bottom part of the screen allows you to upload a new or previously saved configuration file from your computer to your Zyxel Device You cannot upload a configuration file named system-default.conf or lastgood.conf. If you upload startup-config.
Chapter 19 File Manager C:\>ftp 192.168.1.2 Connected to 192.168.1.2. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------220-You are user number 1 of 5 allowed. 220-Local time is now 21:28. Server port: 21. 220-This is a private system - No anonymous login 220 You will be disconnected after 600 minutes of inactivity. User (192.168.1.2:(none)): admin 331 User admin OK. Password required Password: 230 OK. Current restricted directory is / ftp> cd conf 250 OK.
Chapter 19 File Manager Figure 131 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen. Table 95 Maintenance > File Manager > Firmware Package LABEL DESCRIPTION Boot Module This is the version of the boot module that is currently on the Zyxel Device. Current Version This is the firmware version and the date created. Released Date This is the date that the version of the firmware was created.
Chapter 19 File Manager 3 Use an FTP client on your computer to connect to the Zyxel Device. For example, in the Windows command prompt, type ftp 192.168.1.2. Keep the console session connected in order to see when the firmware recovery finishes. 4 Enter your user name when prompted. 5 Enter your password as requested. 6 Enter “hash” for FTP to print a `#' character for every 1024 bytes of data you upload so that you can watch the file transfer progress.
Chapter 19 File Manager Figure 133 Maintenance > File Manager > Shell Script Each field is described in the following table. Table 96 Maintenance > File Manager > Shell Script LABEL DESCRIPTION Rename Use this button to change the label of a shell script file on the Zyxel Device. You cannot rename a shell script to the name of another shell script in the Zyxel Device. Click a shell script’s row to select it and click Rename to open the Rename File screen. Specify the new name for the shell script file.
Chapter 19 File Manager Table 96 Maintenance > File Manager > Shell Script (continued) LABEL DESCRIPTION Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes.
CHAPTER 20 Diagnostics 20.1 Overview Use the diagnostics screen for troubleshooting. 20.1.1 What You Can Do in this Chapter The Diagnostics screen (Section 20.2 on page 219) generates a file containing the Zyxel Device’s configuration and diagnostic information if you need to provide it to customer support during troubleshooting. 20.2 Diagnostics This screen provides an easy way for you to generate a file containing the Zyxel Device’s configuration and diagnostic information.
Chapter 20 Diagnostics Figure 134 Maintenance > Diagnostics The following table describes the labels in this screen. Table 97 Maintenance > Diagnostics LABEL DESCRIPTION Filename This is the name of the most recently created diagnostic file. Last modified This is the date and time that the last diagnostic file was created. The format is yyyy-mm-dd hh:mm:ss. Size This is the size of the most recently created diagnostic file.
CHAPTER 21 LEDs 21.1 Overview The LEDs of your Zyxel Device can be controlled such that they stay lit (ON) or OFF after the Zyxel Device is ready. There are two features that control the LEDs of your Zyxel Device - Locator and Suppression (see Section 1.4 on page 19). 21.1.1 What You Can Do in this Chapter • The Suppression screen (Section 21.2 on page 221)) allows you to set how you want the LEDs to behave after the Zyxel Device is ready. • The Locator screen (Section 21.
Chapter 21 LEDs Figure 135 Maintenance > LEDs > Suppression The following table describes fields in the above screen. Table 98 Maintenance > LED > Suppression LABEL DESCRIPTION Suppression On If the Suppression On check box is checked, the LEDs of your Zyxel Device will turn off after it’s ready. Apply Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings.
Chapter 21 LEDs Figure 136 Maintenance > LEDs > Locator The following table describes fields in the above screen. Table 99 Maintenance > LED > Locator LABEL DESCRIPTION Turn On Click Turn On button to activate the locator. The Locator function will show the actual location of the Zyxel Device between several devices in the network. Turn Off Otherwise, click Turn Off to disable the locator feature.
CHAPTER 22 Antenna Switch 22.1 Overview Use this screen to adjust coverage depending on the orientation of the antenna. 22.1.1 What You Need To Know Positioning the antennas properly increases the range and coverage area of a wireless LAN. On the Zyxel Device that comes with internal antennas and also has an antenna switch, you can adjust coverage depending on the orientation of the antenna for the Zyxel Device radios using the web configurator, the command line interface (CLI) or a physical switch.
Chapter 22 Antenna Switch Figure 138 Maintenance > Antenna > Antenna Switch Select the Enable Software Control option to use the Web configurator to adjust coverage depending on each radio’s antenna orientation for better coverage. Select Wall if you mount the Zyxel Device to a wall. Select Ceiling if the Zyxel Device is mounted on a ceiling. You can switch from Wall to Ceiling if there are still wireless dead zones, and vice versa.
CHAPTER 23 Reboot 23.1 Overview Use this screen to restart the Zyxel Device. 23.1.1 What You Need To Know If you applied changes in the Web configurator, these were saved automatically and do not change when you reboot. If you made changes in the CLI, however, you have to use the write command to save the configuration before you reboot. Otherwise, the changes are lost when you reboot. Reboot is different to reset; reset returns the Zyxel Device to its default configuration. 23.
CHAPTER 24 Shutdown 24.1 Overview Use this screen to shut down the Zyxel Device. Always use Maintenance > Shutdown > Shutdown or the shutdown command before you turn off the Zyxel Device or remove the power. Not doing so can cause the firmware to become corrupt. 24.1.1 What You Need To Know Shutdown writes all cached data to the local storage and stops the system processes. Shutdown is different to reset; reset returns the Zyxel Device to its default configuration. 24.
